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Abstract 

Complete axiomatizations and exponential-time decision procedures are provided for 
reasoning about knowledge and common knowledge when there are infinitely many agents. 
The results show that reasoning about knowledge and common knowledge with infinitely 
many agents is no harder than when there are finitely many agents, provided that we can 
check the cardinality of certain set differences G — G', where G and G' are sets of agents. 
Since our complexity results are independent of the cardinality of the sets G involved, 
they represent improvements over the previous results even with the sets of agents involved 
are finite. Moreover, our results make clear the extent to which issues of complexity and 
completeness depend on how the sets of agents involved are represented. 
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1 Introduction 



Reasoning about knowledge and common knowledge has been shown to be widely applicable 



in distributed computing, AI, and game theory. (See [FHMV95| for numerous examples.) 
Complete axioms for reasoning about knowledge and common knowledge are well known in the 
case of a fixed finite set of agents. However, in many applications, the set of agents is not known 
in advance and has no a priori upper bound (think of software agents on the web or nodes on 
the Internet, for example); it is often easiest to model the set of agents as an infinite set. Infinite 
sets of agents also arise in game theory and economics (where reasoning about knowledge and 



common knowledge is quite standard; see, for example, [ Aum76 , Gea94]). For example, when 
analyzing a game played with two teams, we may well want to say that everyone on team 1 
knows that everyone on team 2 knows some fact p, or that it is common knowledge among the 
agents on team 1 that p is common knowledge among the agents on team 2. We would want to 
say this even if the teams consist of infinitely many agents. Since economies are often modeled 
as consisting of infinitely many (even uncountably many) agents, this type of situation arises 
when economies are viewed as teams in a game. 

The logics for reasoning about the knowledge of groups of agents contain modal operators 
Ki (where Ki(p is read "agent i knows (/?"), Eg (where Ec'f is read "everyone in group G knows 
(/?"), and Cg (where Cg^ is read "(^ is common knowledge among group G"). The operators Eg 
and Cg make perfect sense even if we allow the sets G to be infinite — their semantic definitions 
remain unchanged. If the set of agents is finite, so that, in particular, G is finite, there is a 
simple axiom connecting Eq^p to Kiip, namely, Eg^p Ai^G^np. Once we allow infinite groups 
G of agents, there is no obvious analogue for this axiom. Nevertheless, in this paper, we show 
that there exist natural sound and complete axiomatizations for reasoning about knowledge 
and common knowledge even if there are infinitely many agents. 

It is also well known that if there are finitely many agents, then there is a decision procedure 
that decides if a formula if is satisfiable (or valid) that runs in time exponential in \(p\, where 
ip is the length of the formula viewed as a string of symbols. We prove a similar result for a 
language with infinitely many agents. However, two issues arise (that, in fact, are also relevant 
even if there are only finitely many agents, although they have not been considered before): 



In the statement of the complexity result in [ [FHMV95 |, Eg and Cg are both viewed as 



having length 2 + 2\G\ (where |G| is the cardinality of G). Clearly we cannot use this 
definition here if we want to get interesting complexity results, since |G| may be infinite. 
Even if we restrict our attention to finite sets G, we would like a decision procedure that 
treats these sets in a uniform way, independently of their cardinality. Here we view Eg as 
having length 1 and Cg as having length 3, independent of the cardinality of G. (See, for 



example, the proof of Proposition 3.5 for the role of independence and the definition of 
Sub{ip) in the proof of Theorem 4^ for an indication as to why Cg has length 3 rather than 
1.) Even with this definition of length, we prove that the complexity of the satisfiability 
problem is still essentially exponential time. (We discuss below what "essentially" means.) 
Thus our results improve previously-known results even if there are only finitely many 
agents. 

In the earlier proofs, it is implicitly assumed that the sets G are presented in such a way 
that there is no difficulty in testing membership in G. As we show here, in order to decide 
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if certain formulas are satisfiable, we need to be able to test if certain subsets of agents of 
the form Gq — (Gi U . . . U Gfc) are empty, where Gq, . . . ,Gk are sets of agents. In fact, if 
we are interested in a notion of knowledge that satisfies positive introspection — that is, if 
agent i knows then she knows that she knows it — then we also must be able to check 
whether such subsets are singletons. And if we are interested in a notion of knowledge that 
satisfies negative introspection — that is, if agent i does not know ip, then she knows that 
she does not know it — then we must be able to check whether such subsets have cardinality 
m, for certain finite m. The difficulty of deciding these questions depends in part on how 
Go , . . . , Gk are presented and which sets of agents we can talk about in the language. For 
example, if Gq, . . . ,Gk are recursive sets, deciding if Gq — {Gi U . . . U Gk) is nonempty may 
not even be recursive. Here, we provide a decision procedure for satisfiability that runs in 
time exponential in \ip\ provided that we have oracles for testing appropriate properties 
of sets of the form Gq — {Gi U . . . U Gk)- Moreover, we show that any decision procedure 
must be able to answer the questions we ask. In fact, we actually prove a stronger result, 
providing a tight bound on the complexity of deciding satisfiability that takes into account 
the complexity of answering questions about the cardinality of Gq — (Gi U . . . U G^). 

Again, this issue is of significance even if there are only finitely many agents. For exam- 
ple, in the SDSI approach to security [ EIL96[| , there are names, which can be viewed as 



representing sets of agents. SDSI provides a (nondeterministic) algorithm for computing 
the set of agents represented by a name. If we want to make statements such as "every 
agent represented by name n knows ip" (statements that we believe will be useful in rea- 
soning about security |HvdM99| , |HvdMS99|] ) then the results of this paper show that to 



decide validity in the resulting logic, we need more than just an algorithm for resolving 
the agents represented by a given name. We also need algorithms for resolving which 
agents are represented by one name and not another. More generally, if we assume that 
we have a separate language for representing sets of agents, our results characterize the 
properties of sets that we need to be able to decide in order to reason about the group 
knowledge of these agents. 

In the next section, we briefly review the syntax and semantics of the logic of common 
knowledge. In Section ^ we state the main results and prove them under some simplifying 
assumptions that allow us to bring out the main ideas of the proof. We drop these assumptions 
in Section ^, where we provide the proofs of the full results. 



2 Syntax and Semantics: A Brief Review 

Syntax: We start with a (possibly infinite) set A of agents. Let ^ be a set of nonempty subsets 
of A. (Note that we do not require Q to be closed under union, intersection, or complementation; 
it can be an arbitrary collection of subsets.) We get the language Cg{^) by starting with a set 
$ of primitive propositions, and closing under A, and the modal operators Ki, for i £ A, and 
Eg,Cg, for G eg. Thus, ifp,g G ^,ieA, and G, G' € G, then KiCG{p A Eg'q) G >Cg($). Let 
Cg be the sublanguage of Cg that does not include the Cg operators. Let \ip\ be the length of 
the formula viewed as a string of symbols, where the modal operators Ki and Eg are counted 
as having length 1 and Gg is counted as having length 3 (even if G is an infinite set of agents) 
and all primitive propositions are counted as having length 1. 
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In [|FHMV95| , |HM92| ], A is taken to be the set {1, . . . , n}; in |HM92| ], G is taken to be the 
singleton {{1, . . . , n}} (so that we can only talk about every agent in A knowing if and common 
knowledge among the agents in A), while in [FHMV95|, Q is taken to consist of all nonempty 
subsets of A. 



Semantics: As usual, formulas in Cg are either true or false at a world in a Kripke structure. 
Formally, a Kripke structure M over A and $ is a tuple (5, tt, {/Cj : i S A}), where 5 is a set of 
states or possible worlds, vr associates with each state in 5 a truth assignment to the primitive 
propositions in ^ (so that 7r(s) : $ {true, false}), and JCi is a binary relation on S for each 
agent i & A. We occasionally write /Cj(s) for {t : {s,t) £ /Cj}. 

We define the truth relation \= as follows: 
(M, s) 1= p (for p € <I>) iff tt{s){p) = true 
(M, s) ^ (/? A V iff both (M, s) \= ip and (M, s) \= ip 
(M, s) h iff (M, s)^^ 
(M, s) h ^iV' iff {M, t)^ip for all t G /C,(s) 
(M, s) h £^GV5 iff (^, •s) N ^iV' for ah i G G 

(M, s) ^ Cgv? iff (M, s) ^ ^G*^ for A; = 1, 2, 3, . . ., where Eq is defined inductively by taking 
E}.ip =def ^GV? and E^-^^ip =def EcE^ip. 

We say that t is G-reachahle from s in M \i there exist sq; • • • jSfc with s = sq, t = s^, and 
(si,Sj+i) G UjgG^j- For later use, we extend this definition so that if S' C S, we say that 
t is G-reachahle from s in S' if so,...,Sfc G S' . The following characterization of common 
knowledge is well known |FHMV95|. 



Lemma 2.1: (M, s) \= Ccf iff {M, t) \= ip for all t that are G-reachahle from s in M . 



Let Aiji,{^) be the class of all Kripke structures over A and <I> (with no restrictions on the /Cj 
relations). We are also interested in various subclasses of M._a{^), obtained by restricting the 
ICi relations. In particular, we consider M\{^), A^^(<&), 7W^*(<&), and A4^*($), the class of 
all structures over A and ^ where the /Cj relations are refiexive (resp., reflexive and transitive; 
reflexive, symmetric, and transitive; Euclidean,^] serial, and transitive). For the remainder of 
this paper, we take $ to be flxed, and do not mention it, writing, for example Cg and Mji, 
rather than Cg{(^) and A4^(<I>). 

As usual, we define a formula to be valid in a class A4 of structures if (M, s) \= (p for all 
M G and all states s in M; similarly, ip is satisfiahle in A4 if (M, s) \= (p for some M G 
and some s in M. 

^Recall that a relation R is Euclidean if {s,t), (s,ii) £ R implies that {t,u) € R. 
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Axioms: The following are the standard axioms and rules that have been considered for 
knowledge; They hold for all i E A. 

Prop. All substitution instances of tautologies of propositional calculus. 

Kl. (Kiif A Ki{<p ^ V)) ^ Kii;. 

K2. Kitp ^ (p. 

K3. ^Kifalse. 

K4. Kiip ^ KiKiip. 

K5. ^Ki(p Ki^Kicp. 

MP. From (p and (p ^ ip infer if). 

KGen. From ip infer Kiip. 

Technically, Prop and K1-K5 are axiom schemes, rather than single axioms. Kl, for example, 
holds for all formulas ip and -0. A formula such as Kiq V ^Kiq is an instance of axiom Prop 
(since it is a substitution instance of the propositional tautology pV-ip, obtained by substituting 
Kiq for p). 

We will be interested in the following axioms and rule for reasoning about everyone knows, 
which hold for all G € Q. 

El. Eg<p Kiip if i G G. 

E2. {fXi^jijKiip A Ao'eO'Eo'^) =^ Eacp if A' is a finite subset of A, Q' is a finite subset of Q, 
and G C {A'\J{\jg')). 

E3. [Eg^p a Eg{ip =^ V)) Eatp. 

E4. Eg{Egp => ip). 

E5. £;g<^ ^ 

E6. ^ Eg^Eg^P- 

E7. From A... A(pk) infer -.(^^GjI/ji A ... A EG^^k) if Gi fl . . . n Gjt 7^ 0. 
EGen. From infer -Eg¥'- 

E2 can be viewed as a generalization of the axiom EgP> ^ Eg"P if G' C G (of which El is a 
special case if we identify K^ip with E^^yip, as we often do in the paper). Essentially it says that 
if Ki(p hold for all agents i G G (and perhaps some other agents i ^ G) then Eqip holds. Since, 
if G is infinite, we cannot write the infinite conjunction of Kip for all i G G, we approximate 
as well as we can within the constraints of the language. As long as Eg'(P and K^ip holds for 
sets G' and agents i whose union contains G, then certainly EqP holds. 

If A is finite (so that all the sets in Q are finite) we can simplify El and E2 to 
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E. Ec'f ^i^GKi<f■ 



It is easy to see that E follows from El and E2 (in the presence of Prop and MP) and every 
instance of El and E2 follows from E if ^ is finite. E is used instead of El and E2 in [[FHMV95 



HM92|| . Note that E2 is recursive iff deciding if G— {A! yj{yjQ')) = is recursive. (We determine 
precisely which such questions we must be able to answer in Proposition |3.3| .) 

E3 and EGen are the obvious analogues of Kl and KGen for Eg- We do not need them in 
the case that A is finite; it is easy to see that they follow from Kl, KGen, and E. In the case 
that A is infinite, however, they are necessary. 

Axiom E4 is sound in M.\, -M^, A^^*, and Mj^. It is easy to see that E4 follows from 
K2, El, and EGen, so will not be needed in systems that contain these axioms. Moreover, it is 
not hard to show that E4 follows from El, E2, and K5 if the set of agents is finite. However, it 
does not follow from these axioms if the set of agents is infinite. 

Axiom E5 follows from K2 and El. Moreover, we use it only in systems that already include 
K2 and El. Nevertheless, for technical reasons, it is useful to list it separately. Similarly, it is 
not hard to see that E7 is a derivable rule in any system that includes Prop, MP, Kl, K3, El, 
E4, and EGen (we prove this in Section |4.4| ). While we use E7 only in such systems, like E5, it 
is useful to list it separately. 

Axiom E6 (with Eg replaced by Ki) is the standard axiom used to characterize symmetric 
ICi relations [ |FIIMV95 |. It follows easily from K2, K5, El, and E2 if A is finite. However, like 



E4, it must be specifically included if A is infinite. 

Finally, we have the following well-known axiom and inference rule for common knowledge: 

CI. Ccif^ EGiifACGV). 

RCl. From if =^ Eg{tP A if) infer ip =^ Cgi^- 

Historically, in the case of one agent, the system with axioms and rules Prop, Kl, MP, and 
KGen has been called K; adding K2 to K gives us T; adding K4 to T gives us S4; adding K5 to 
84 gives us S5; replacing K2 by K3 in S5 gives us KD45. We use the subscript Q to emphasize 
the fact that we are considering systems with sets of agents coming from G rather than only 
one agent and the superscript C to emphasize that we add E1-E3, EGen, CI, and RCl to the 
system. In this way, we get the systems Kg , Tg, and S4g . Thus, Kg consists of Prop, Kl, 
MP, KGen, El, E2, E3, EGen, CI, and RCl; we get S4g by adding K2 and K4 to Kg. We get 
KD45g by adding K3-K5 and E4 to Kg and we get S5g by adding K2, K4, K5 and E6 to Kg. 

One of the two main results of this paper shows that each of these axiom systems is sound 
and complete with respect to an appropriate class of structures. For example. Kg is a sound and 
complete axiomatization with respect to A4a aiid SSg is a sound and complete axiomatization 
with respect to AA.'^J^. In the case that A is finite, this result is well known (see [[FHMV95| , 



HM92| — as mentioned earlier, E is used in the axiomatization instead of E1-E3 and EGen). 
What is perhaps surprising is that E1-E3 and EGen suffice even if A is infinite. For example, 
suppose that Q just consists of the singleton A. In that case, E2 becomes vacuous. Thus, while 
the axioms force Eji^ip to imply that each agent in A knows (p, we have no way of expressing 
the converse. Indeed, it is easy to construct a structure for the axioms with the standard 
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interpretations of all the Ki relations but a nonstandard one of E^, where all the agents in A 
know ip and yet Ej^^ip does not hold. Consider, for example, a structure with a single state s 
for the language with an infinite set A of agents. Suppose that every primitive proposition p 
is true at s, /Cj is empty for all i £ A, and Ki is interpreted in the usual way for alH G .4 (so 
that Kif is true at s for all formulas ip). For E'^, however, we say that Ej^ip holds at s if and 
only if it is provable in, say. Kg. Of course, there are obviously standard models in which Ej^p 
does not hold and so (by the soundness of the axioms for standard interpretations) Ej^p is not 
provable. Thus, in this interpretation, Ej^p does not hold at s while Kip does for every i E A. 
Finally, it is clear that all the axioms of Kg are true in this structure. Similar examples can 
be given to show that E4 and E6 do not follow from the specified other axioms when the set of 
agents is infinite. 

3 The Main Results and a Proof in a Simplified Setting 

In this section, we state the two main results of this paper — complete axiomatizations and 
decision procedures. We then provide a proof of a simpler version of these results that illustrates 
some of the main ideas. We first state the completeness results. 

Theorem 3.1: For formulas in the language Cg: 

(a) Kg is a sound and complete axiomatization with respect to A4_a.j 
(h) Tg is a sound and complete axiomatization with respect to 

(c) S4g is a sound and complete axiomatization with respect to M'^, 

(d) S5g is a sound and complete axiomatization with respect to M.''J^, 

(e) KD45g is a sound and complete axiomatization with respect to M.^^. 

Before stating the results regarding complexity, we first show that questions about certain 
facts regarding sets of the form Gq — {Gi U . . . U G^) are reducible to satisfiability. We are not 
just interested in sets of the form Gq — {Gi U . . . U Gk) for Gi, . . . , G ^. For example, when 
dealing with M'^^, it turns out that we are interested in sets H of this form if \H\ = 1. But if 
Hi is such a set, then we are also interested in sets of the form H2 = Gq — {Gi U . . . Gk U Hi). 
And if \H2 \ = 1, then we can also include H2 in the union, and so on. The following definition 
makes this precise. 

Definition 3.2: Given a set of subsets of A and an integer ni > 1, define a sequence 
i7o", J^i^, ... of sets of subsets of A inductively as follows. Let i/g" = J^. Suppose that we have 
defined J^, J^. Then J^^^ = J U {G - UH : G e J, H C J^, H finite, \G - un\ < m}. 
Let J™ = UiJ^™; let J"^ = {G - un : G e J,n C J'"'',n finite}. For uniformity, we take 
J'^ = {G - UH : G e J,n C J,n finite}. I 

Let J^* be the algebra generated by J (that is, the Boolean combinations of sets in J'). It 
is useful to talk about the length of a description of various sets in J'* (particularly those in 
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jm £qj, gonic m). Formally, we assume we have a language whose primitive objects consist of 
the elements of J and the symbols U and — (for set difference). The length of a description is 
then the number of symbols of J that appear in it. Notice that, in general, an element of J* 
may have several different descriptions. We are not always careful to distinguish a set from its 
description. (Wc hope that the reader will be able to tell which is intended from context.) We 
use i(G) to denote the length of the description of G G J* . 

Let Qj^ = Q U {{i} : i € A}. Throughout the paper (and, in particular, in the proof of the 
next proposition), for ease of exposition, we identify E^ij with K^, ioi i & A (which allows us 
to write Eq for each G G GX). 

Proposition 3.3: 

(a) The question of whether \G\ > for G G is reducible (in time linear in 1(G)) to the 
satisfiability problem for the language Cg with respect to all of A4a> ■^^j -^A' -^A^' 
and Mj^. 

(b) The questions of whether \G\ > and \G\ > 1 for G € Q\ are each reducible (in time 
linear in 1{G) ) to the satisfiability problem for the language Lg with respect to all of A4^, 
MJ\ and Mf. 

(c) For all m > 1, the question of whether \G\ > m for G € is reducible (in time linear 
in 1{G) + m) to the satisfiability problem for Cg with respect to A^^* and M^. 

(d) The question of whether \Gi H . . . Ci Gk\ > 0, for Gi, . . . ,Gk G Ga reducible (in time 
linear in k) to the satisfiability problem for Cg with respect to A4^. 

Proof: For part (a), suppose that G G Q^. Thus, G = Gq — (GiU. . .UGfe) for some Go, . . . , G^ G 

Consider the formula =dcf ~^EgoP/\EgiP/\- ■ .AEg,.p, where p is a primitive proposition. 
Clearly ipa is satisfiable in Ma, M% M% MJ^ or Mf iff |Go - (Gi U . . . U Gfc)| > 0. 

For part (b), given G, we construct two formulas ^G,p and i/jq with the following properties. 

• ipG,p is satisfiable iff |G| > 0. 

• If (M, s) \= (pG,p, then (M, s) |= -<Kjp for some j G G. 

• tpG is satisfiable iff |G| > 1. 

• |<^G,p| and \iPg\ are both linear in 1{G). 

This, of course, suffices to prove the result. 

We construct the formulas ^G,p by induction on the least h such that G = G' — UH and 
T~(- ^ iSA)h- (Wc arc here thinking of G as specified by its description.) If H C (t/^)o = Ga, 
suppose that H = {Gi, . . . , G^}. Then we take ^G,p to be ^Eg'P A Eg^p A ... A Eg^P- This 
clearly has the desired properties. 

Now suppose that H C {GA)h for ^ > 1. Without loss of generality, we can assume 
that H = {Gi, . . . , Gfe/, Gfc/+i, . . . , G^}, where Gi, ... ,Gk' G Ga and, for j = k' + 1,... , k, 
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Gj G {0^)1 - Qa is of the form G'^ - UHj with G'j G Ga, Hj C igA)i-v and \Gj\ = 1. Define 
(pG,p as 

k k 
^Ec'^i^p A f\ (pG,,Pj) A -EgiP a ... a Eg^,P a /\ ^G^.Pj, 
j=fc'+l j=k'+l 

where we assume that the sets of primitive propositions that appear in (pGj,pj, j = k' + 1, . . . , k, 
are mutuahy exclusive and do not include 

Now suppose that ^g,p is true at some state s in M G A^^- Then for some i G G', we 
must have (M, s) \= ^Ki^{^p A Aj=fc'+i ^Gj,pj)- We cannot have i G Gi U . . . U Gk', since 
(M, s) 1= Eg p for j = 1, . . . ,k' . Nor can we have i G Gj for j = k' + 1, . . . ,k. For suppose 
that Gj = {ij}, j G {k' + 1, . . . , k}. Then (M, s) |= ^Ki^ipG^^pj A Eg'Pj, which implies that 
(M, s) \= ^KiKi-pj A Ki-Pj. Thus, we cannot have i = ij. It follows that G ^ fl). 

Conversely, if G 7^ 0, we show that (pG,p is satisfiable in (and hence also in and 

M^). We actually prove a stronger result. We show that if Gi, . . . , Gfc are nonempty and the 
formulas ipG-^^^p^, • • • , ^Gk,Pk involve disjoint sets of primitive propositions, then V^Ci.pi A ... A 
VGk,Pk is satisfiable in a structure in A^^* of a certain form. To make this precise, suppose that 
M = (5, vr, {/Cj,i G A}), s G 5, 5' is a set of states disjoint from S, and s' G 5'. We say that 
M is embedded in the structure M' = (S* U S", tt', {/C^, G ^}) (s, s') if 

1- tt'Is = and /C^lsxS = for i G A, 

2. if G /C- for t G S" and G S' , then t = s and t' = s'. 

We show by induction on h that if Gi, . . . ,Gk G \Gi\ > for i = l,...,k, and the 

formulas c^c^^p^, . . . , ^PGk,Pk involve disjoint sets of primitive propositions, then for alHi, . . . , 
such that ij G Gj, there exists a structure M G Al^* and a state s in M such that: 

1. (M, s) ^ v?Gi,pi A ... A (/?Gfc,Pfe, 

2. 3ti, . . . ,tk such that (s, tj) G /C,^ and (M, tj) ^ -ipj, 

3. /Ci(s) = {s} for i ^ {ii, . . . 

4. for all structures M' and states s' in M' such that M is embedded in M' at and 
(M', s') N Pi A ... A pfc, we have that (M', s) ^ ^Gi,pi A ... A (/JGfe.p^- 

If /i = 1, then it is easy to construct such a structure. Given ii, . . . , such that ij G Gj (where 
the ij are not necessarily distinct) we construct a structure M with states ■ ■ ■ ,tk (where 
tj = tj, if ij = ij,) such that {M,tj) [= A{j':i.,=i^} -Pi' A A{j':i^,^i^}Pj', (A^rs) ^ pi A . . . Ap^, 
and K-i is the least equivalence relation that includes (s, tj) if i = ij. It is easy to check that M 
has the required properties. For the inductive step, suppose that we are given ii,. . . ,ik such 
that ij G Gj. Note that the first conjunct of ^Gj,pj has the form ^EG'.^{~^Pj A Afc=^i 'PGjk,Pjk)- 
By the induction hypothesis, we can find a structure Mj with state space Sj and a state tj in Sj 
with the properties above such that {M,tj) \= pj A Afc=^i fGjk,Pjk- ~ b'' ^® *^an also assume 
Here we are implicitly assuming that the set of primitive propositions is infinite, so that t his can be done. 
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With more effort, we can prove a similar result even if the set is finite, using the techniques of [Hal95| 
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without loss of generality that Mj = Mji and tj = tji. Let S consist of 5*1 U . . . U S'fc together 
with a new state s. We define M G A^^* so that each of the structures Mj is embedded in 
M at {s,tj) and the relation in ICij in M is the least equivalence relation that makes this true 
such that (s, tj) G ICij. We leave it to the reader to check that we can define an interpretation 
tt' with all the required properties. Of course, the fact that ipG,p is satisfiable if |G| > is now 
immediate. 

Finally, define ipc to be (pG,p A Eciq A {^p =^ ^G,q)), where we assume that the primitive 
propositions that appear in ^PG,p and ipG,q are disjoint. 

We claim that V'G is not satisfiable if |G| < 1. Clearly it is not satisfiable if |G| = 0, 
since ipG,p is not. So suppose, by way of contradiction, that G = {i} and (M, s) \= ipG for 
some M G A^^- Then, thanks to the properties of ^G;p and ^G,qi we must have (M, s) |= 
-^Kip A Ki{q A (-ip =^ ^Kiq)). It is easy to see that this gives us a contradiction. On the other 
hand, if |G| > 1, we can construct a structure satisfying iI)g as follows. Suppose that i,j € G 
and 'PG,p is of the form 

k k 
^Eo'^i^pA /\ (pGj,pj) ^Eg,pA...AEgi^,pA f\ Eg'.Pj. 
j=k'+l j=k'+l 

We know that \Gk'\ = ■ ■ ■ = \Gk\ = 1, so by our previous argument, we can find a structure 
M' = (S", . . .) G MJ^ and states s',t' G S' such that (M, s') |= A Ai=fc'+i V>G,,p,, {s',t') G 
ICj, {M',t') \= and ICi{s') = {s'}. Since p does not appear in ipG,q, we can assume without 
loss of generality that {M, s) \= -ip. Now let M G A^^* be a structure whose state space is 
S' U {s}, where s is a fresh state not in 5", such that M' is embedded in M at (s, s'), (s, s') G fCi, 
(M, s) \= p Aq, and /Cj/(s) = {s} for i' ^ i. It is easy to see that (M, s) \= ipG- 

For part (c), we construct formulas <fm,G,p such that 

• if (M, s) \= <fm,G,p for M G A^^* (and hence also for M G M^*), then there exist m + 1 
distinct agents ii,. . . , im+i S G such that (M, s) \= -iKi^-ip, j = 1, . . . ,m + 1; 

• \fm,G,p\ = 0{1{G) +m); 

• if |G| > m, then ipm,G,p is satisfiable in A4^* (and hence in Mj^). 

We first define an auxiliary family of formulas. If G',Gi, . . . ,Gk C Q^, let ipm,G',Gi,...,Gk,p 
be the formula 

EG^qo /\ ■ ■ ■ /\ EG^qoA 

^Eg'^{Po Api AqiA Eg'{po ^ Pi A qi))A 

... A ^EGi^{jPoApm+l A qm+l A -Bg'(P0 ^ Pm+l A gm+l))A 
^G'((Po ^ (P A -.go)) A {qi <^ -^P2 A 92) A (92 4» ^^3 A 93) A . . . A (g^+i true)), 

where poj • • • jPm+i; 90; ■ ■ ■ ) Q'm+i are fresh primitive propositions distinct from p. Observe that 
|'0m,G',Gi,...,Gfc,p| is 0{k + m). It is easy to check that the last clause forces g^, for 1 < i < m, to 
be equivalent to -^Pi+i A ... A -^Pm+i- at least in the worlds G'-rcachable in one step. Thus, in 
these worlds, the formulas pi Aqi, i = 1, . . . ,m + 1, are mutually exclusive. Clearly if (M, s) \= 
'ipm,G',Gi,...,Gk,p for ^ € ■^A^ ^^^^ t^®^® agents ii, . . . , im+i in G' - (Gi U . . . U G^) 
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such that (M, s) |= ^Ki-^{pQ A pj A qj A Eqi{pq =^ pj A qj)). (Note that we cannot have 
ij € G' n (Gi U . . . U Gk) since (M, s) ^ Ec^qo A Eqi{pq ~'Q'o))- Thus, there must exist states 
tj, j = 1, . . . , m + 1 such that (s, tj) G /Cj^. and (M, tj) ^ PoApj A gj A Ecipo =^ Pj A gj). To see 
that these agents ij must be distinct, suppose that ij = ij' for j < j' . By the Euchdean property, 
we have {tj,tji) G /Cj^. . Since {M,tj) \= Eqi{pq =^ pj Aqj), we must have {M,tj/) \= pj Aqj. But 
since (M, tj') \= qj <^ {~^Pj A ... A -^pm+i), this is inconsistent with the fact that (M, tji) \= pji. 
Since (M, s) \= Eqi{pq =^ p), it follows that (M, s) \= ^Ki.^p for j = 1, . . . , m + 1. Conversely, 
it is easy to see that if \G' — {Gi U . . . U Gk)\ > m then ipm,G',Gi,...,Gk,p is satisfiable in Al^*. 
We leave the details to the reader. 

We now construct the formulas fm,G,p by induction on the least h such that G = G' — UH 
and n C (Ga)'!^- H H = {Gi, . . . , Gk} C (^^)^ = Ga, then we take (pm,G,p = i^m,G\Gu...,Gk,p- 
Now suppose that H C {Ga)T for h > 1. Without loss of generality, we can assume that 
TC = {Gi, Gk',Gk'+i, Gk}, where Gi,...,Gk' G Ga and, for j = A;' + 1, . . . , k, Gj G 
{Ga)T-i is of the form G'j - UHj with G'j G Ga, 'Hj C {GA)t^i, and \Gj\ < m. Suppose that 
\Gj\ = rrij. By induction, for j = k' + 1, . . . , k, we can construct formulas ^mj-i,Gj,p such 
that if {M,s) \= ^mj-i,Gj,p, then for each agent i G Gj, we have {M,s) \= -^Ki^p and the 
formula V'm,G',Gi,...,Gj./.p- Without loss of generality, we can assume that, other than p, the sets 
of primitive propositions mentioned in the formulas ^Pmj-i,Gj,p are disjoint, and these sets are 
all disjoint from the set of primitive propositions in ipm,G' ,Gi,...,G^.i ,p- Let '^m,G,p be the formula 

m 

i^m,G',Gi,...,Gy,p' A /\ ipm,-l,Gj,p A Ec'{p' =^ Eg'^p). 
j=k'+l 

The argument that this formula has the required properties is almost identical to that for 
■0m,G',Gi,...,Gfc,p; we leave details to the reader. 

Finally, for part (d), consider the formula (pd defined as 

Eg^Pi a ... a £^Gfe_iPfe-i A Ec^i^Pi V ... V -^pk-i). 

We leave it to the reader to check that ipd is satisfiable in M.^ iff Gi fl . . . n = 0. I 

We already saw that for axiom E2 to be recursive, we need to be able to decide whether 
|Go - (Gi U . . . U Gfc)| > 1 (or, equivalently, whether Go C Gi U . . . U G^) for Go, . . . , G^ G Ga- 
Proposition |3.3| shows that if there is no recursive algorithm for answering such questions, 
the satisfiability problem for the logic (even without Cq operators) is also not decidable. For 
simplicity here, we assume we have oracles that can answer the questions that we need to answer 



(according to Proposition 3^) in unit time; we consider the complexity of querying the oracle 
in more detail in Section More precisely, let Dm be an oracle that, for a set G G Ga, tells 
us whether |G| > k, for any k < m. (Thus, queries to oracle Dm have the form (G, A;).) Let O' 
be an oracle that tells us whether Gi fl . . . n Gfc = 0, for Gi, . . . , Gfc G Ga- 

Theorem 3.4: There is a constant c > (independent of A) and an algorithm that, given 
as input a formula ip G Cg, decides if cp is satisfiable in A4a (resp., Ma' -^A' ^^A' -^a) 
and runs in time 2'^^^^ given oracle Oq (resp., Oq, Oi, 0\^p\, both 0|(^| and O'), where queries 
to the oracle take unit time. Moreover, if G contains a subset with at least two elements, then 
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there exists a constant d > ( independent of A) such that every algorithm for deciding the 
satisfiability of formulas in (resp., M^, M^X' ^A^^ M^) runs in time at least 2'^^'^^, even 
given access to oracle Oq (resp., Oq, Oi, both 0|^| and O'), for infinitely many formulas 

if. 



Before proving Theorems 3.1 and 3.4, we prove a somewhat simpler theorem that ahows 
us to both explain intuitively why the results are true and point out some of the difficulties in 
proving them. 



Proposition 3.5: If there is an oracle that decides if G = ^ for each Boolean combination G 
of elements in Q_a, then, for every formula (p G Cg, we can effectively find a formula tp'^ in 
a language jCg,, where Q' consists of all subsets of a set A! of at most 2'*^' agents, such that 
\(p^\ = \ip\ and if is satisfiable in M^. iff f'^ is satisfiable in Mjx'- 

Proof: Given ip, let be the set of subsets G of agents such that Eq or Go appears in ip. 
(Recall that we are identifying Ki with so that {i} £ Q^p if Ki appears in ip.) Note that 

Suppose that Q = {Gi, . . . , Gn}- An atom over Q isa, nonempty set of the form G'^fl. . .PlG'^, 
where G[ = Gi or G[ = Gi. Clearly there are at most 2^ atoms over Q. Let A' consist of the 
nonempty atoms over Q^p. Note that \A'\ < 2l'^L Define cr : ^ — >■ by taking a{i) to be 
the unique atom over Q^p containing i. We extend cr to a map from 2-^ 2-^ by taking 
cr{G) = {cr{i) : i € G} {= {H £ : H CI G}). Translate (p to by replacing all occurrences 
of Eg and Gq in ip by E^^^q^, and C„(^q^, respectively. Clearly \ip\ = \(p'^\. (Note that it is 
important here that we take the length of Eq and Cg to be independent of G.) 

If (p is satisfiable, let (M, s) witness that fact. Convert M into a structure M°" over A' 
with the same state space by setting (s, t) G ICa iff (s, t) G UjgA^j for each A G A' . An 
easy induction shows that for every formula ip with sets (of agents) chosen from Q^,, we have 
(M, s) \= ip \i and only if {M^^s) \= . The only point that needs any comment is that Eg 
(and so also Gg) has the same meaning in M (in terms of reachability) as -Eo-(g) (C'o-(g)) in Af*^, 
by the definition of a{G) and the K,a relations. Thus (Af^, s) \= ^p'^ as required. 

For the other direction, suppose that (M',s) \= ip" for some structure M' over A'. We 
define a structure M over A by defining Ki = K,„(^iy Again an easy induction shows that for 
every formula with sets chosen from Q^, {M' , s) ^ -0 if and only if (M, s) \= . Once again, 
the only point to notice is that Eg (and so also Gg) has the same meaning in M' (in terms 
of reachability) as -Eo-(g) (C'o-(g)) in ^ by the definition of a{G) and the relations Kj. Thus 
(M, s) \= if as required. I 



Corollary 3.6: Given an oracle that decides, for each Boolean combination G of elements in 
Qa, whether G = $, there is a constant c > (independent of A) and an algorithm that, given 
as input a formula (p G Cg , decides if if Ci Cg is satisfiable in M.^ o,i^d runs in time 2'^^''^' . 



Proof: Clearly, to check if ip is satisfiable, it suffices to check if ip'^ is satisfiable. In [HM92|, 
there is an exponential time algorithm for checking satisfiability. However, this algorithm 
presumes that the set of agents is fixed. A close look at the algorithm actually shows that it 
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runs m time T'^\f\^ where m is the number of agents. In our translation, the set of agents is 
exponential in [(^j, giving us a double-exponential time algorithm. | 

Corollary 3.7: // Q is closed under intersection and complementation, then Kg is a sound 
and complete axiomatization for the language with respect to M.^- 

Proof: Soundness is straightforward, so we focus on completeness. Suppose that ip is valid. 
By Proposition 3^, so is '^'^ . Since A' is finite, Kg, is a complete axiomatization for Cg, with 



respect to A4^/. Thus, Kg, h ip'^ . We can translate this proof step by step to a proof of if in 
Kg. We simply replace every formula ij) that appears in the proof of ^p^ by ip'^ , where ■if)'^ is 
obtained by replacing each occurrence of Ka in if) by Ea unless A = {i} is a singleton, in which 
case we replace Ka by Ki, and replacing each occurrence of Eg, and Cq in i/j by E\jg, and 
C[jG, respectively. Since we have assumed Q is closed under complementation and intersection, 
it is also closed under union, and hence ■0^ is a formula in Cg. 

It is easy to check that the translated proof is still a proof over the language Cgi Tautologies 
become tautologies as {(p V ipY = ip'^ \/ ip'^ and similarly for negations. Instances of MP in the 
proof of ip'^ become instances of MP in the proof of (p because ((/? — > ipY = ip'^ ^ tp'^ . Instances 
of KGen in the proof of ip" become instances of EGen or KGen in the proof of p>; similarly, 
instances of Kl are converted to instances of Kl or El. It is easy to see that instances of El, 
E2, E3, EGen, CI, and RCl are converted to legitimate instances of the same axiom. | 



While Corollaries p.6| and 3.7 are close to our desired theorems, they also make clear the 



difficulties we need to overcome in order to prove Theorems |3.1| and |3.4| . Specifically, 

• we need to cut the complexity down from double-exponential to single exponential; 

• we need to prove completeness without assuming that Q is closed under complementation 
and intersection; 

• we want to use an oracle that tests only whether a set of the form Go — (Gi U . . . U G^) 
is nonempty, rather than one that applies to arbitrary Boolean combinations; 

• we want to extend these results to the case that the /Cj relations satisfy properties like 
transitivity. 

With regard to the last point, while in general it is relatively straightforward to extend com- 
pleteness and complexity results to deal with relations that have properties like transitivity, it is 
not so straightforward in this case. For example, even if M € A^^, the relations in the structure 



constructed in Proposition 3.5 are not necessarily transitive. As shown in Proposition 



we need a different oracle to deal with transitivity. 



4 Proving the Main Results 



In this section, we prove Theorems 3.1 and |3.4 The structure of the proof is similar to that 



of Corollaries |3^ and |3.7| ; we describe step by step the modifications required to deal with 
the problems raised in the previous section. It is convenient to split the proof into four cases, 
depending on the class of structures considered. 
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4.1 The Proof for Ma and 



In Proposition 3^ we showed that we could translate a formula (/? to a formula ip"' such that ip 
was satisfiable in Mj, iff (p^ was satisfiable in M._a'j where A' consisted of the atoms over Q^p. 
Our goal is to maintain the translation idea, but use as our target set of agents a set whose 
elements we can determine with the oracles at our disposal (for testing the nonemptiness of 



certain set differences). As a first step, we try to abstract the key ingredients of Proposition 3.5 . 
Suppose that we have a set A' of agents and a partial map a : A ^ A'. Again, we can extend 
o" to a map from 2"^ to 2'^ : 0"(G) = {cr{i) : i G Q}. Given a formula (/J, let p)" be the formula 



that results by replacing all the occurrences of G in by o"(G). In Proposition 3.5, A' is the set 
of atoms over Q^p and (t{i) is the unique atom containing i. We were able to show that, for that 
choice of A' and o", the formulas (/? and (p" were equisatisfiable. What does it take to obtain 
such a result in general? The following result shows that we need to be able to find a mapping 
T : A! ^ 2-^ — {0} with one key property. 

Proposition 4.1: Given a formula ip and a partial map a : A ^ A' such that cr{G) ^ for 
all G ^ Qtp, suppose that there is a mapping t : A' ^ 2-^ — {0} such that for all G G Q^, we 
have U{t{A) : A G o'(G)} = G. Then p is satisfiable in (resp., iff p" is satisfiable 

in M_A' (resp., M"^,). 

Proof: Given p and <t, suppose there exists a mapping r with the property above. We show 
that p and p" are equisatisfiable. 

First suppose that (M, s) \= p, where M G Ma- We convert M = {S, tt, {/Cj : i G A}) into 
a structure M' = {S,tt,{}Ca ■ A G A'}) by defining ICa = Uj/Cj : i G t{A)}. Notice that the 
assumed property of r implies that for all G G we have 

UaG(t(G)^A = ^A€a{G) Uigr(A) = ^idG^i- 

An easy induction on the structure of tjj now shows that (M, t) |= -i/' if and only if (M', t) \= ifj^ 
for alH G 5 and all formulas V G -C^ . Also note that if M G M% then M' G M\, ( since the 
union of reflexive relations is reflexive) . 

For the opposite direction, suppose (M',s) \= p" for some M' = [S,-k,{1Ca ■ A G A'}) G 
M-A'- Define M = (5", vr, {/Cj : i G A}) G by setting /Cj = /Co-(i) if o"(^) is defined and the 
empty relation otherwise. Note that for all G G we have 

Again, an easy induction on the structure of ip shows that (M, t) \= ip if and only if (M', t) \= if)" 
for all t G S and all formulas ip G Cg^- 

If M' G A^^, we modify the construction slightly by taking /Cj = {{t,t) : t G S*} if (j{i) is 
undefined. Since (t(G) 7^ for G G Q^p, it is easy to check that we still have Ui^c^i = ^ieGf^aii)^ 
so the modified construction works for the reflexive case. I 



For the mapping a of Proposition we can take r to be the identity, but this requires an 
oracle for nonemptiness of atoms. We now show how to choose A' and deflne maps a and r in 
a way that requires only information about whether sets of the form Gq — (Gi U . . . U G^) are 
empty. 



13 



Definition 4.2: Given a set Q of sets of agents and G E Q, a set C ^ is a G-maximal subset 
of g if G - and G - {{UH) U G') = for all G' eG -H. Let 7e(e) = {{G, H) : G e 

G,H is a G-maximal subset of Q}. I 

Note that we can check whether 7^ is a G-maximal subset of Q by doing at most \G\ tests of 
the form (G — UH') = 0, and we can find all pairs {G,H) in TZ{Qip) by doing at most |^|2l^l^^ 
such tests. 

The following lemma gives some technical properties of TZ{G) that will be used frequently. 

Lemma 4.3: Suppose that {G,TC) G 'R-iG) for some set Q of subsets of A. 

(a) G — UH is an atom over Q and, in fact, G — WH = r\{Q — H) (1 {DHenH). 

(b) If {G',n) GTZiG), then (G - U H) = (G' - U H). 

(c) If (G', n') G n{g) and n / n', then (G - u n (G' - u n') = 0. 

Proof: For part (a), first observe that since W is a G-maximal subset of G, for H ^ Ti, we have 
G - U{n U {H}) = 0; i.e., G_- UH C H. Thus, if H iU, we have G - [JH = {G r\ H) - UH. 
Thus, G -Un = Gn (nHenH) = n(^ - H) n (nHenH), as desired. By definition, G - UH is 
an atom over Q. 

Part (b) is immediate from part (a) , since it is clear that G — UTi is independent of G and 
depends only on H. 

For part (c), suppose that Ti / 7i'. Without loss generality, there is some H ^ H — TL' . 
It follows immediately from part (a) that G — UTi and G' — UTY' are distinct atoms (hence 
disjoint), since G - UH C F and G' U H' C i?. | 

If (G, 7i) G 'R-{Q), let denote the atom associated with Ti defined in Lemma ^]^(a). It is 
independent of G by Lemma [4.3| (b). We omit Q, writing simply A-}^, when it is clear from the 
context which set Q we have in mind. 



We now show how to define a translation satisfying the hypotheses of Proposition |4.1| using 
the elements of TZ{Qip) identified according to the second coordinate alone. 

Given a formula let A^^ = {H : 3G[(G,?^) G 7^(^^)]}. Define ai : ^ ^ by setting 
= TL if i ^ A-j-i (as defined after Lemma |4.3| ) and undefined otherwise. As before, we 
extend ai to 2-^ by defining (7i{G) = {o"i(«) : i G G}. 

Lemma 4.4: Define t : A'f ^ 2-^ by setting T{n) = r\{Q^ - H). Then 

(a) <Ji{G) = {n&A^: 3G' G Q^HG' ,n) G 71(0^)), G ^ H}, 

(b) ai{G)^(/}forGeg^, 

(c) t{H) ^$ for He A^, 

(d) U{T(7i) -.neaiiG)} = G. 
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Proof: For part (a), first suppose that G ^ 7i and {G',Ti.) € TZ{Qip) for some G' G Q^. Then 
by Lemma [4.3K a), it follows that A-^ C G. Since Afi / 0, there is some i € A-j-i. Since i € G 
and cTi(i) = 7^, it follows that TC G cri(G). For the opposite inclusion, suppose that H G o"i(G). 
Then = for some i G G n A-^. Since G n 7^ 0, it follows from the definition of A-^ 
that G^n. 

For part (b), given G, note that there must be some G-maximal subset H. Thus, (G, 7^) G 
n{g^). Since G - UTi 7^ 0, we must have G ^ By part (a), 7^ G cri(G), so c7i(G) 7^ 0. 

For part (c), suppose that Ti G Then there exists some G such that (G, 7^) G 7^(^<^), and 
hence G - U7^ 7^ 0. It suffices to show that n(e^ - 7^) D G - U7t:. Since G - ((U7t:) U G') = for 
all G' eg^-n, it follows that G- U7^ C G' for each G' G -7^. Thus, n{g^-n) D G - U7^. 

For part (d), we first show that U{r(7t:) : 7^ G cji(G)} C G. Note that if 7i G ai{G), then by 
part (a), G G g,p — H. Thus, t{TC) = ri{g^ — 7^) C G. For the oppposite containment, suppose 
that i £ G. Let W = {G' £ g,p : i ^ G'}. Since i £ G — UW, there must be a G-maximal 
subset H of g^ containing W. By part (a), we have H G ai{G). Moreover, since W C H, for 
ah H' eg^- n, we have i G H'. Thus, z G n{g^ - H). It follows that i G U7^g^j(G) n {g^ - H), 
as desired. I 

Since \ A\ < 2^'^^, we have now reduced satisfiability with infinitely many agents to satisfia- 
bility with finitely many agents, at least for Mj, and M^, using only tests that we know we 
need to be able to perform in any case. We next must deal with the problem we observed in 



the proof of Corollary 3.6, that is, there may be exponentially many agents in the subgroups 
mentioned in ip'^'^ . This is done in the following result. In this result, we assume that the 
complexity of checking whether i G G is no worse than linear in \A\. While we do not assume 



this in general, it is true for the A' and sets G that arise in the translation of Proposition 4.1 
which suffices for our application of the result to the proof of Theorem pA. 



Theorem 4.5: If A is finite and there is an algorithm for deciding if i £ G for G £ g that 
runs in time linear in \A\, then there is a constant c > (independent of A) and an algorithm 
that, given as input a formula ip G Cg, decides if (p is satisfiable in Mj^ (resp., M\) and runs 
in time 0(|^|2^l'^l). 



Proof: We first present an algorithm that decides if (/? is satisfiable in Mj^] we then show 
how to modify it to deal with A^^- The algorithm is just a slight modification of standard 
decision procedures | FIIMV95 , HM92| ] . (Far more serious modifications are needed to prove the 



analogous result for the M% M'2\ and M^*; see Theorems U, and 



Let Sub{ip) be the set of subformulas of ip together with Ecitp A Gctp) and tp A Gci^ for each 
subformula GgV' of (p. Sub'^{ip) consists of the formulas in Sub{ip) and their negations. An easy 
induction on \ip\ shows that \Sub{ip)\ < \ip\, so \Sub~^{(p)\ < 2\ip\. (Here we need to use the fact 
that we take the length of Cq to be 3.) 

Let consist of all subsets s of Sub~^{ip) that are maximally consistent in that (a) for 
each formula ^p G Sub{ip), either ip £ s or -■■0 G s, (b) they are propositionally consistent (for 
example, we cannot have all of -0 A ip' , ^ip, and ^ip' in s), and (c) they contain Eg{iP A Cc'ip) 
iff they contain Ccip. Note that there are at most 2l'^l sets in S^{(p). 

For s £ and G G g_A_, we define s/Eq = {ip ■ EqiP ^ s} (again, we identify Ki with 
E^ij). Define s/Ki = \Ji,zG{s / Eq) ■ Define a binary relation /Cj on for each i G ^ by taking 
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(s,t) G /Cj s/Ki C t. We now define a sequence of subsets of S^. Suppose that we have 
defined , . . . , . S^^^ consists of ah states in that seem consistent, in that the following 
two conditions hold: 

1. If ^Ectp € s, then there is some t £ such that {s,t) G UjgG^j and ^ip G t. 

2. If -iCgV' G •S; then there is some t such that t is G-reachable from s in 5-^ and ^ip G t. 

If 7^ S'-'"''^ then we continue the construction. Otherwise the construction terminates; in this 
case, the algorithm returns "(/J is satisfiable" if </? G s for some state s G S^^^ and returns "</? is 
unsatisfiable" otherwise. 

Since ^ S^^^, has at most 2^'^^ elements, and there are |^| relations, it is easy to see 
that the whole procedure can be carried out in time 0([„4|2'^l'''l) for some c > 0. 

It remains to show that the algorithm is correct. First suppose that ip is satisfiable. In 
that case, (M, sq) \= f for some structure M = {S, it, {1C[ : i G A}) G ^A_A. We can associate 
with each state s £ S the state s* in consisting of all the formulas tp G Sub{ip) such that 
(M, s) \= ip. It is easy to see that if (s,t) G K,[ then (s*,t*) G /Cj. A straightforward induction 
shows that the states s* for s £ S always seem consistent, and thus are in for all j. Moreover, 
(f G Sg. Thus, the algorithm declares that 99 is satisfiable, as desired. 

Conversely, suppose that the algorithm declares that ip is satisfiable. We construct a struc- 
ture M = {S, vr, {IC'- : i G .4}) over A and ^ in which ip is satisfied as follows. Let j be the stage 
at which the algorithm terminates. Let S = . Define vr so that 7r(s)(p) = true iff p G s, for 
s £ S and p G For each z G we take JC'^ to be the restriction of /Cj to S"-^ . A straightforward 
induction on the structure of formulas shows that for all formulas ip G Sub{(p) and states s £ S, 
we have (M, s) \= Tp iS tp £ s. (The cases for Ecip and CqiP use the appropriate clauses of the 
definition of seeming inconsistent and the choice of j.) Since (p € s for some s* G S, it follows 
that (M, s*) \= ip, so ip is satisfiable. 

To deal with A^^, the only change necessary is that in going from to S'^ in the con- 
struction, we also eliminate s G 5^ if {s,s) ^ /C, for some i £ A. This guarantees that the /Cj 
relations are refiexive. The remainder of the proof goes through unchanged. I 



Proof of Theorem 3.4 for A4j( and The deterministic exponential time lower bound 

in Theorem 3^ follows from the lower bound in the case where A is finite, which is proved in 
|HM92, Theorem 6.19] using techniques developed by Fischer and Ladner [FL7£] for PDL. The 
sets G that arise in the lower bound proof have cardinality 2, so oracles are of no help here. 

For the upper bound, suppose that we are given a formula (p. We first compute the set 
TZ{Gtp). This can be done with at most |'/'|2l'^l calls to oracle Oq, since \Gip\ < \(p\ and we need 
only check, for each G £ and 7i Gip, whether G — Ti = %. 

Consider the mapping ai of Lemma 4.4. By part (a) of Lemma 4.4, we can compute the 
formula using < |v3|2l'^l calls to oracle Oq- By Proposition 4.1 and Lemma 4.4, the formulas 
(/? and (/j"^^ are equisatisfiable. By Theorem 4.5, we can decide if ip"^ is satisfiable in time 0(2'^l'^l) 
for some c > (since \'p^'^ \ = \'p\ and the set A of agents that appear in ip"'^ has size at most 
219=1). I 
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We now want to prove Theorem 3.1 in the case of Ai_A and M^. The idea is the same 
as that of Corollary 3^. If (/? is valid, then so is 99°^^. We can then appeal to completeness 
in the case of finitely many agents to get a proof of ip'^'^ that we can then "pull back" to a 
proof of if. There is only one difficulty that we encounter when trying to put this idea into 
practice. Exactly how do we pull back the proof? For example, suppose that the proof of ip'^'^ 
involves a formula ip with an operator K-}^. In general, there will be many agents i £ A such 
that C7i(i) = H. One option is to replace K-^ by E^-i^^y that is, replace Ti by all i such that 
cri(i) = 7i. (This is what was done in the proof of Corollary |3.7| .) The problem with this is 
that there is no guarantee that the resulting set is in Q. Alternatively, we could replace Kyi by 
Ki for some i such that cTi{i) = Ti. But if so, which one? 

We actually take the latter course here. We solve the problem of which i to choose by showing 
that there is a proof of ip""^ in which the only modal operators that arise in any formula used 



in the proof are modal operators that appear in (p"^ (Lemma 4^). For these operators, there 
is a canonical way to do the replacement (Lemma |4.6| ) . While it may seem almost trivial that 
the only operators that should be needed in the proof of ip"'^ are ones that already appear in 



the formula, this is not the case for the standard completeness proof FHMV95| , [IM92|, since 



in the proof of the validity of a formula of the form EqiP, the modal operators Ki are used for 
i € G, although these operators may not appear in ip. It is important that we use the axioms 
El and E2 in doing the proof, rather than the axiom E; otherwise the result would not hold. 
Indeed, the result does not quite hold in the case of Tg ; we need to augment it with E5. 



Lemma 4.6: The mapping ai (when viewed as a map with domain 2'^) is injective on Q, 



LP- 



Proof: Suppose that G ^ G' . Without loss of generality, suppose that i £ G — G' . Then there 
is a G-maximal set 7i that includes G'. By Lemma |4.4K a), we have Ti € cJi(G). Since G' G Ti, 



it follows from Lemma 4.4(a) that Ti ^ ai{G'). Thus, ai{G) / cri{G'). I 



For the next lemma, we write AX tp if there is a proof of (p in AX that involves only 
modal operators that appear in p. Let (T^)"^ consist of Tg augmented with the axiom E5. 
Although E5 follows from El and K2, using E5 allows us to be able to write proofs of (p that 
use only the modal operators in cp. 



Lemma 4.7: If A is finite and (p G £g is valid with respect to Ma (resp., M^^), then Kg h,^ (p 
(resp., (Tg)+ p). 

Proof: We first consider the case of M._a. Since (/? is valid, -^p is not satisfiable. That means. 



when we apply the construction in the proof of Theorem 4.5 to -199, all the sets containing ^p 
are eliminated. For each state s G S*^, let ps be the conjunction of all the formulas in s. 

We prove the result by showing, by induction on j, that 

if a state s G does not seem consistent, then (ps is K^-inconsistent, i.e.. Kg ^Ps- (1) 

To see that (|l|) suffices to prove the lemma, note that standard propositional reasoning (i.e., 
using Prop and MP) shows that, for any formula ip G Sub{^p), 
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(Here we need the observation that by CI and RCl, nothing is lost by our assumption that 
Ccip G s iff Eg{'4' a CgV') £ s.) Negating both sides of we get 

Kg A|5g5i:^g5}^99s. (2) 

Thus, if Kg hip -iips for each set s containing -up, it follows by standard propositional reasoning 
that Kg 93, as desired. 

While this general approach to proving completeness is quite standard, we must take extra 
care because of our insistence on restricting to symbols that appear in ip, particularly when 
dealing with the case when a state seems inconsistent due to a formula of the form ^EqiP or 
^CqiP not being satisfied. This is where the axioms El and E2 come into play. 

To prove ([l|), we first need a number of basic facts of epistemic logic and some preliminary 
observations. The basic facts (which are easily proved using Prop, E3 (or Kl when G = {i}), 
MP, and EGen (or KGen); see |FHMV95, p. 51, 94]) are that if ^ and ^' involve only modal 
operators in p, then 

Kg Eg (V' A V') ^ A Eg V'' (3) 

and 

if Kg V ^ ^' then Kg Eq^P EqiP'. (4) 

Assume by induction that for all s £ — , we have Kg ~'Ps- We now show that if 
s G does not seem consistent then Kg ~'^s, by considering in turn each of the two ways 
s may seem inconsistent. 

First suppose that s does not seem consistent because -^EqiP G s and there is no state t G 
such that (s,t) G Ui^cK^i and -^ip G t. We show that 

Kg Ec^p. (5) 

Since ^EqiP is a conjunct of (ps (since -<EgiP £ s, by assumption), (|5[) shows that ps is Kg- 
inconsistent, as desired. 

To prove (^), we first show that if G G then 

if (s, t) ^ UiecICi, then Kg ps =^ Ea^pt- (6) 

To prove (^), suppose that (s,t) ^ UjgG^i- For each i £ G, there must be some G*'* G 
and formula EQi,t9 such that i € G, EQi,t9 G s and G t. Since EQi,t9 G s and G t it is 
immediate that Kg =^ EQi.tO and Kg ^ ^99^. Now applying (Q) and propositional 

reasoning, we get that Kg \-^ ps =^ EQi,t^pf Since we can find such a G*'* for each i G G, we 
have that G C Uj^GG*'*. Since G is finite, by E2, we have Kg ps =^ Ec^pt, as desired. 

Returning to the proof of (|5|), note that (since Eg'P G s) if -^ij) G t then (s,t) ^ UjgG^i- 
Thus, from (P) and (|^, we have 

Kg 99, ^ EG(A|tgs,^^^gt}-(^t). (7) 

By the induction hypothesis, for all states in t G 5^ — , we have that Kg ^pt- Thus, using 
(^, we have 

Kg ^ \t&S^:^^&t}^Vt- (8) 
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(H) now follows from (|), (0), and (H). 

Finally, we must show that if ^CqiP G s and there is no state t (z G-reachable from s 
in such that -iip € t, then Kg h,^ ips =^ Ccip, again showing that (fs is Kg -inconsistent. 
This follows by a relatively straightforward modification of the completeness proof given in 
|FHMV95|, [HM92[ , so we just sketch the details here. Let Ti = {t e : ^CqiP G t and there is 



no state t' e G-reachable from t in such that € t'} and T2 = {t G S'-' : Ccip £ t}. Let 
T/ consist of those states in Tj that also contain ^, z = 1,2. Let T = Ti UT2 and let T' = T{UT2. 
We claim that there is no pair {t, t') G UjgG^i such that t £ T and t' G — T' . It is immediate 
that if t G r2 then (since ij: A Cci^ G t/^c Q t') t' e T^. If t G Ti and t' G - T', then either 
-1^ G t' or -'CgV' G and there is a state t" G-reachable from t' in S'-' such that ^ip G t". This 
means that either t' or t" is a state G-reachable from t in S'-' containing -1-0. This contradicts 
the fact that t G Ti. 

It now follows from that for all t G T and t' G — T', we have 

K'^ ^^ipt^ Ec^ipt'- (9) 

Let = VteT^t and let = \/t'eT"Pt'- By propositional reasoning, we have Kg h,^ 93^/ 
{ifT /\ip)- It easily follows from (^), (Q), and (^) that K^^ 1-;^ 99^ =^ Eg^Pt'- Since this is true for 
all t G T, we have 

Kgh^<^T^^G(¥'TAV). (10) 

By applying RCl and the fact that s G T, we have Kg ip^ =^ Cctp- Since ^Cci^ G s, it 
follows that is Kg -inconsistent. 

This completes the completeness proof in the case of J^a- To deal with A^^, we must just 
show that if s is eliminated because (s, s) ^ /Cj for some i £ A, then Tg ^fs] all other cases 
are identical. But if (s, s) ^ /Cj, then there must be some G and ^/^ such that i & G, EqiP G s, 
and -'ip G s. Since (Tg)+ includes the axiom SgV' V'j we have that (Tg)+ ""/^si as 
desired. I 



Proof of Theorem 3.1 for and A4^: We have already observed that the axioms are 



sound. For completeness, suppose that 99 is valid with respect to A^^. By Proposition |4.1| , so 
is ip^'^. By Lemma 4.7, there is a proof of ip'^'^ in Kg that mentions only the modal operators 



in . Given a formula ip in which the only modal operators that appear are modal operators 
that appear in ip'^'^ (and thus have the form E^^t^Q^, (^0-1 (g)> and ^^-^(j), for sets G and {1} in Q^p) 
let V'^^ be the unique formula all of whose modal operators appear in ip such that [tp'^'^)"'^ = tp. 



Lemma 4.6 assures us that ■ip'^'^ is well defined. We can pull the proof of tp'^'^ back to a proof of 
ip, by replacing each occurrence of a formula ip in the proof by V'^^- 

The argument for is identical, except that the proof uses instances of the axiom E5. 
These can be eliminated by using El and K2, as we observed earlier (although now the proof 
of may use modal operators Ki that do not appear in ip). | 

4.2 Deahng with Mj^ 



Proposition [4.1| as it stands does not hold for There is no guarantee that the translated 

formula is satisfiable in A^^, even if is. Indeed, suppose that G is closed under intersection 
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and complementation, so that we can use the function a of Proposition Suppose that 
is the formula Ecp A ^EqEgP, where |G| > 2. The formula ip'^ looks syntactically identical, 
except that cr{G) is a single agent in A'. We cannot make the )Cg relation transitive and still 
satisfy cp"' . More generally, to deal with we must be careful in how we deal with singleton 
sets. 

As a first step, we define mixed structures. Since we also need these to deal with A^^* 
and A4^, we define three types of mixed structures at once. We say that a binary relation /C 
is secondarily reflexive | Che80 | if {s,t) E /C implies {t,t) G K. Let ■M.'[ai+A2 (^'^sp-, A^^'+^ij; 
■^Ai+A2^ consist of structures M = {S, vr, {/Cj : i & AiU A2}) where the relations /Cj for i G Ai 
are reflexive and transitive (resp., reflexive, symmetric and transitive; Euclidean, serial and 
transitive) and the relation ICi for i G A2 are reflexive (resp., reflexive and symmetric; serial 
and secondarily reflexive). 

We can now define our translation in the case of M^. Although we can in fact get an 
analogue to Proposition iA for M^, it turns out to be easier to provide a translation that 
combines Proposition 4.1 and Lemma rather than separating them. As suggested by 
Proposition |3.3| , the translation involves TZ{Q^), rather than TZ{Qip). Given a formula ip, let 
_4^,rt ^ 1^ . 3G[{G,n) G n{g^)]}. Let Ai = {n : 3G[{G,n) G 7^(G^), \G - un\ = 1]}; 
let A2 = - Ai. Define a2 : A ^ A'^'''^ as before: (12 (i) = H ii i e An and a2{i) is 

undefined otherwise. Given H G A^'^^, we define T2{'H) = ri{Q^ — TL). Since it is easy to see 
that Tl{gl) = n{g^) for some appropriate ^, it is immediate that Lemma applies to (J2 and 

T2- 



Proposition 4.8: ip is satisfiable in iff 'P^'^ is satisfiable in -M^^+^^j- 

Proof: First suppose that (M, s) \= p), where M G M"^. We convert M = {S, vr, {/Cj : i G A}) 
into a structure M' = (5", vr, {ICn '■ Ti- G A'^'^^}) as before, by defining IC-n = U{/Cj : i G T2{'H)}. 
Since Lemma [4.4] applies, the proof that {M',s) \= ip is identical to that in Proposition |4.1| . 
We must only show that M' G Since the union of reflexive relations is reflexive, it is 

immediate that ICfi is reflexive for H £ A2- If 7^ G ^1, then \A-}-i\ = 1. Suppose that A-^ = {i}- 
We claim that T2{H) = {i}. By construction, {i} G Q^. We cannot have {i} G H, since i ^ UTC. 
Thus {i} £g}p-n, so T2{n) = n(^^ - H) C {i}. since T2{n) / by Lemma |]|(c), we must 
have T2{T~L) = {i}. Thus, Kn = ICi, so ICj-i is reflexive and transitive. 

For the opposite direction we need to work a little harder than before, because we must 
ensure that all the fCi relations are reflexive and transitive for all i £ A. Supppose (M, s) \= p"'^ 
for some M = {S,tt,{IC'h : TC G A''^'^'^}) G ■M^Xi+A2' "^o "^i disjoint copies of 

S. For a state s G S, let Sj be the copy of s in Si, i = 0, 1. Let M' = {S' , vr', {ICi : i G ^}) be 
deflned as follows: 



• S' = SoUSi. 

• n'^Si) = vr(s) for i = 0,1. 

• If <T2(i) G ^1, deflne ICi = {{si,tj) : {s,t) G IC^^{i'^,i,j G {0,1}}. ICi is clearly reflexive 
and transitive in this case, since /Co-2(«) 
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• If (T2(«) = Tl A2, note that {Ay^l > 2. It is immediate from the definition that o"2(«) = fi 
for ah i € At-i. Pick some i-H € A-j-^. If i = i-j-i, then define /Cj = {(soi^i) : ^ ^h} U 
{(si>Si) : i e {0, 1}}; if i ^ in, define /Ci = {(si,io) : (sj^) e ^w}U{(sj,Sj) : j G {0,1}}. 
Clearly /Cj is reflexive and transitive. 

This construction guarantees that 

(s, t) G /Ct^ iff (so, ii), isi,to) G U{j.^2(j)=7^}/Ci (11) 

and 

(si,to) G U{j.^2(j)=7Y}^i iff (■50, ii) G U{j.^2(j)=W}^«- (-'^^) 

A straightforward argument by induction on structure now shows that if "0 G , then the 
following are equivalent for alH G S": 

. (M,t) 

• both {M',to) \= 7p and (M',ti) \= V', 

. (M',to) N^or (M',ti) ^V- 

Of course, the interesting cases are if ip is of the form Kiip' , EqiP' , or CqiP' . These follow 
immediately from observations ( |Tl] ) and (^). I 



The next step is to get an analogue of Theorem for A^J^^^^- The basic idea of the 



proof is the same as that of Theorem 4.5. However, in our construction, we need to make 



the /Cj relations transitive. To see the difficulty, suppose that (p is Kip A Ecq, where G is 



a set of agents containing 1. Recall that in Theorem 4.5, states are consistent subsets of 
Sub~^{if). Let s, t, and u be states such that s = {Kip, EGq,p,q}, t = {Kip,^EGq,p,q}, and 
u = {Kip,^EGq,p, ^q}- With our previous construction, we would have both {s,t) G /Ci and 
{t, u) G /Ci. By transitivity, we should also have (s, u) G /Ci. But since Ecq G s and -^q G u, we 
have (s,u) ^ /Ci. Nevertheless, each of s, t, and u individually seems consistent. Which state 
should we eliminate in order to preserve transitivity? 

To deal with this problem, we need to put more information (i.e., more formulas) into each 
state. Intuitively, if (s,t) G /Cj, then we should have Kiq G t, because if Ecq G s, then Kiq 
should also be in s, as should KiKiq by K4. It would then follow that Kiq should be in t. This, 
in turn, would guarantee that {t,u) ^ /Cj, since q ^ u. 

What we would like to do now is to augment Suh{ip) by including all formulas Kiip such 
that Eci^ G Suh{ip) and i G G r\Ai. (We restrict to Ai since these are the only relations that 
are required to be transitive.) While this approach can be used to force the /Cj relations to 
be transitive, the resulting set of formulas can have size 0(|^i||99|), which means the resulting 
state space (the analogue of ) could then have size 

2l-4i||</p|_ This would not give us the desired 
complexity bounds. Thus, we must proceed a little more cautiously. 

Theorem 4.9: If A = Ai^J A2 is finite and there is an algorithm for deciding if i ^ G for 
G £ Q that runs in time linear in \ A\, then there is a constant c > (independent of A) and 
an algorithm that, given a formula ip of Cg , decides if ip is satisfiable in A^^^+^^j '^^'^ runs in 
time 0(|>l|2^l^l). 



21 



Proof: We assume for ease of exposition that 7^ 0; we leave the straightforward modification 
in case ^1 = to the reader. For each i ^ Ai, let ESuhi{ip) be the least set containing 
Sub{ip) such that if Ecy^ G Sub{ip) and i £ G, then Knp G ESuhi{ip). It is easy to see that 
\ESuhi{Lp)\ < 2\Sub{ip)\, since we add at most one formula for each formula in \Sub{ip)\. Let Sf 
consist of all the subsets of ESubf{ip) that are maximally consistent, and now let = Ujg^^5/. 
Note that, as modified, < 2^1*^1. Thus, this modification keeps us safely within the desired 
exponential time bounds. 

We keep the definition of /Cj unchanged for i £ A2 (i.e., (s,t) € JCi iff s/Ki C t), but we 
need to modify it for i G Ai. We redefine /Cj for i G ^1 by defining (s, t) G JCi iff s/Ki U {Kiip : 
Kill; €z s} t n {t/Ki U {Ki^jj : Kiip G t}). It is easy to check that this modification forces the 
/Cj relations to be transitive. We force all the /Cj relations to be refiexive just as with A^^, by 
eliminating s G 5"^ if (s, s) ^ /Cj for some i £ Ai U A2- The remainder of the construction — 
eliminating the states that do not seem consistent — is unchanged. 

We now need to show that the algorithm is correct. First suppose that (/? is satisfiable in 
■^Ai+A2' ^^^^ case, (M, sq) |= for some structure M = (5, 7r,{/C^ : i £ Ai D A2}) G 
^Ai+A2' associate with each state s G 5* and i £ Ai the state s| in Sj consisting 

of all the formulas tp G ESubi{ip) such that (M, s) |= tp. It is easy to see that if {s,t) G /C^ 
then {sj,t*) G JCi for all jj^ Using this observation, a straightforward induction shows that the 
states s* for s £ S always seem consistent, and thus are in for all j and all i G Ai. Moreover, 
If G {so)i for all i £ Ai. Thus, the algorithm will declare that ip is satisfiable, as desired. 

Conversely, suppose that the algorithm declares that (p is satisfiable. We construct a struc- 
ture M = {S,TT, {)C'i : i £ AlU A2}) G MX 

+A2 ™ which (f is satisfied just as Theorem [4.5| . 



Our modified construction guarantees that the JC'i relations are all refiexive and the ones in Ai 
are transitive. I 



We are almost ready to prove Theorem 3^ for However, we first we need to characterize 
the complexity of translating from ip to ip'^'^. In particular, we need a bound on the number 
of elements in 'R-{Q^) and the number of oracle calls required to compute them. To do this, 
we first define two auxiliary sequences of sets VY^^J) and £i^{J), i = 1,2,3, .. .. (We omit 
the parenthetical J when it is clear from context.) Fix m. Let Pq* = J and T>Y\.i = J yj 
{G-UH: {G,n) G 7^(D™) and \G - UH| < m}; let = W - ^cT- Set = UiP^ and 
gm ^ yj^grn- Finally, denote 7^(P"") by W^{J). It is easy to check that C C . . . and 
that TV^{J) = IJiUiVf). 

The next lemma provides partial motivation for these definitions. 
Lemma 4.10: 7^™(J^) = n{J'^). 

Proof: An easy induction on i shows that T)^{J') C J'P^ (as defined in Definition |3.2| ) for all 
i, so C J"^. We next show that every set in J'[^ is the union of sets in V^, by induction 
on i. This is immediate if i = 0, since Jg" = V'q' = J . Suppose that the result holds for 
we show it for JJ^^. Suppose that H G J^^. U H £ J, then clearly H £V'^. Thus, without 
loss of generality, H £ Ji^i — J ^ which means that \H\ < m. Let H' be the union of all sets 

^Note that it is not necessarily the case that {s*,t*,) £ Id for j' 7^ i. For example, suppose tp is the formula 
EgP, i € GnAi, and M is such that {M,s) \= EGPf\p, {M,t) \= -^Egp A p, and {s,t) G /Cj. Then for i ^ 
and j ^ G, we have s* = {Egp,p} and t*, = {p, -^Ecp}- Since p € s* / Ki — t*,/Ki, we have that {s*,t*,) ^ Id. 
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in contained in H. If H' = H, then we are done. Suppose by way of contradiction that 
H — H' ^ f!). We obtain a contradiction to the choice of H' by showing that H — H' contains a 
set in P™. 

Since H' is finite, it can be written as a finite union of sets in P™, say of TCi = Hi, . . . , Hi^. 
Since H G J^+i - J, H = for some G G J and ^ J^™. By the induction hypothesis, 

there exists some H3 C V"^ such that □7^2 = UWs. There must exist some set TI4, ^ TiiU Ti^ 
such that (G, H4) G TliV"^). But then H - H' ^ G - UH4 G P"", and we obtain the desired 
contradiction. 

It now easily follows that 7^(J™) = 7e(P'") = TZ'^iJ). I 

The following result will be used to help compute the elements of 1Z"^{J). 

Lemma 4.11: Let J he a set of subsets of A with I^| = n. 

(a) If {G,n) G TZ{T)), where J QV C J*, then G - UH is an atom over J. 

(b) J C C J* for allium. 

(c) \{n : 3G G V"'{{G,n) G 7^™(J)}| < 2". 

(d) If {G,n) G 7^(Pf ), then either G £ J and £^ C H or An e and £^ - {An} ^ H. 
Moreover, if (G,n) G 7^'"(J), then either G £ J and C H or {G - UH) G and 

(e) V"" = and E"^ = 



Proof: For part (a), we know from Lemma [4.3| (a) that if {G^Ji) G TZ{T>), then G — U7i is an 
atom over "D. Since C P C J'*, it is immediate that it must in fact be an atom over J as 
well. (Recall that J* is the algebra generated by J'.) 

Part (b) follows immediately from (a), since an easy induction on i shows that C J'*. 

For part (c), by Lemma |4.3| (a), it follows that An is an atom over T>"^. But since C 
P'" = UjP™ C J'* by part (b), it follows that An is actually at atom over J. Moreover if 



(G', n') G and H / Ti', then it follows from Lemma U(c) that An + An'- Since there 

are at most 2" atoms over J , part (c) follows. 

For part (d), if {G^U) G TliBf) then, by Lemma U(a), An = G -\JH\s, an atom over 
Pf* and has the form n(Pf* — H n{// : G W}. By the arguments of part (c), An is also an 
atom over J . We say that the sets in — H appear positively in An and the sets in Ti appear 
negatively in An- If one of the sets G' G ff^ appears positively in An then clearly A-^ C G' . 
But since the elements of £Y^ are also atoms over it follows that in this case An = G' G £Y^ 
and, since 7^ is G-maximal, £"1" — {vI'h} C "H. Otherwise, C as required; moreover, since 
p?" = U J" and G ^ 7i, we must have G £ J. The argument for the second half of (d) is 
identical. 

Clearly the two claims in part (e) are equivalent. We prove the second. As observed in the 
proof of (c), every set in is an atom A over J . It is easy to see that there are no atoms in 
f"™ where all n sets in J appear negatively, since every set in £^ is a nonempty subset of some 
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G ^ J . (This can be proved by induction on i for each We prove by induction on i that 
if ^ € and n — i sets appear negatively in A for i > 1, then A G f™. 

Clearly if i = 1, then A = G — {Hi U . . . U Hn-i), and 7i = {Hi, . . . , Hn-i} is a G-maximal 
subset of J'. Thus, (G, 7Y) E P]" and A € . Suppose that the result is true if i = k and 
suppose that n — {k + 1) sets appear negatively in A. As ^ S iS™, there must be some minimal 
j such that A G fj^^. By definition, A = Ah for some {G,n) G n{Vf). By (d), either 
A = G — (uW U (S™) and W C J7 or ^ G fj". The latter case contradicts our choice of m, so 
we may assume that A = G — (UTi.' U £j^) and TC' C J". It is easy to see that TC' must consist 
of precisely the sets in J that appear negatively in A. (If it did not include all the sets that 
appear negatively in A then Ti' \j£J^ would not be a G-maximal subset of JUEJ^] if it includes 
any sets that appear postively then A would be empty.) Let £' consist of all the atoms A' in 
£^ in which the set of sets in J that appear negatively in A' is a strict superset of Ti' . It is 
easy to see that G - {uW U f j") = G- {uW U £'), since ah the sets in f ™ - £' must be disjoint 
from G — UTC'. (This is clear for the B G f — £' for which some set appearing negatively in 
A does not appear negatively in B. On the other hand, if the same sets appear negatively in 
as in ^ then B = A and we contradict the minimality of j.) By the induction hypothesis, 
£' C Thus, A = G-{n'U ,) G as desired. I 

We remark that a simpler proof, just using the fact that there are at most 2"' atoms over 
J', can be used to show that £^ = £^1^ for n' > 2". This simpler proof would suffice for the 



purposes of this subsection. However, we shall use the added information in (e) in Section 4.5 



Proof of Theorem 3.4 for Again, the lower bound follows from standard results in 



| HM92|| . 



For the upper bound, suppose that we are given a formula ip such that n = \(p\ and TC G A'^'^'^. 



By definition, there exists a G such that (G, H) G 7e(^^). By Lemma p^ , TZ^iQ^) = 7^(£/M. 



Thus, H C V^{G,p) = Qip^ E^{Q^). By Lemma 4.11 (d), either £n{Oip) ^ TC ov H contains all 



but one element of £^{G^). Thus, we can uniquely characterize W by a pair (Tl',X), where 
H' = Tl n and X = £n{Gip) — ^ (so that X is either the empty set or a singleton). It should 
be clear that we can compute compute the set £^{Q^) in time 0(n^2'^") and which of these (at 
most 2^" + 2") pairs is in Ai and A2 using at most 2n(2^" + 2") calls to the oracle Oi. 



By Lemmas |4.4| (a) and 1.11 , we can similarly compute the formula ip°'^ in time 0{2^ 



using 0{2^"') oracle calls. We now apply Proposition 4^ and Theorem just as we applied 
Proposition and Theorem 4.5 in the case of A4_a. | 



We next want to prove Theorem p.l| for A^^. Just as with and we want to pull 
a proof of (p^'^ back to a proof of a. However, it is no longer true that we can necessarily 
prove ip'^^ using only the modal operators that appear in ip"'^ . We may also need to use K-j-i for 



TL Ai- Fortunately, this does not cause us problems. The following extension of Lemma 4.6 
is immediate. 



Lemma 4.12: The mapping 02 (when viewed as a map with domain 2-^) is injective on Q^. 

Let (S4^)-^i+-^2 consist of the axioms in (Tg)+ (so that, in particular, E5 is included), 
together with every instance of K4 {Ki(p =^ KiKiip) for i G Ai. We write (S4g)-^i+-^2 ^ 
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there is a proof of ip in (S4g)-^i+-^2 using only tlie modal operators that appear in if and Ki 
for i € Ai. 

Lemma 4.13: If A is finite and (p € Cg is valid with respect to M^^^^^^,^, then (S4g)-^i+-^2 
if. 



Proof: The proof is similar to that of Lemma 4.7 for A4^, except that since the definition 
of the KLi relation is different, we must still check that the results still hold with the modified 
definition. 

Suppose that s G does not seem consistent because ^EqiP € s and there is no state 
t G such that {s,t) G Uiec^i and G t- We want to show that (S4^)-^i+-^2 ^ Eci^. 

As before this suffices. 

For each i ^ G and, by induction, each we have a provable equivalence for ip similar to 
the one before: (S4g if: ^ /\{t£Si^)-^ip&t}^^t- So it suffices to find, for each such i 

and each t e with ^ip e t, a G*'* containing i such that (S4g)-^i+-^2 ^ EQt,t^Lpt. For 

i G A2, this follows just as before. For i G Ai^ we show that (S4g)'^i+-^2 \-^ ^ Ki^(pf 
By our assumption (s,t) ^ /Cj. Thus, there exists some formula 6 G s/-R'j U {Ki6 : G 
sy-itnit/WiUiKie : KiO G t})). If e G s/TU, then (S4g)-^i+-^2 ps =^ KiO. If = i^Ti^' is in 
s, then (S4g)-^i+'42 ^ ^^^z. By K4, we have that (S4g)-^i+-^2 ^ Ki^i^'. Thus, in 

either case, we have (S4g)-4i+-42 ^ j^.q since 9 G s//r,U{Ki6' : KiO G s}, it follows that 

KiO G ESuhi[-^ip). We cannot have /Cj^ G t, for then (since {t,t) G /Cj, so i/-fCj C t) we would 
have ^ G t n t/Ki, contradicting our choice of 9. Thus we must have that ^Ki9 G t. It follows 
that (S4g)^i+^2 ^ -nift. Using (|), we get that (S4g)^i+^2 ETii^i^ ^ Ki^^ft- Since 

(S4g)-^i+-^2 ^ ii:,Ki6l and, as shown earlier, (S4g)-^i+-^2 ^ j^^0^ follows that 

(S4g)-^i+'42 ^ ^^^(^^^ as desired. 

Finally, we must show that if ^CqiP G s and there is no state t G 5-^ G-reachable from s in 
such that -■V' G t, then S4g =^ C'gV'- This argument is identical to that given in the 



proof of Lemma 4.7, so we do not repeat it here. I 



Proof of Theorem 3.1 for A4^: Again, we have already observed that the axioms are sound. 



For completeness, suppose that ip is valid with respect to M-a- By Proposition 4.5, tp'^^ is valid 



with respect to By Lemma 4.13 , there is a proof of p'^^ in Kg that mentions only 



the modal operators in p"^ and the operators K-^ for Ti G Ai. Using Lemma 4.12| , it follows 
that we can pull this back to a proof of p in S4g . | 

4.3 Dealing with M'J* 

A4^* and introduce additional complications. The translation used in Proposition 4^ no 



longer suffices. We need to deal with the fact that in A^^*, we can test not only that whether 
a set is a singleton, but whether it has size k for any k. Given a formula p, suppose that 
\p\ = n. We want to map ^ to a finite set of agents and prove an analogue of Propositions [4.8| . 
The obvious analogue of A^''^^ would be to consider the sets Ti such that {G,?i) G TZ{G^). We 
essentially do this, except that we replace all sets of cardinality < n by the singletons in them. 
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Given a set J of subsets of A, let J"^ = V^^J) U {{i} : 3G G < m, i G G}. 

Let AP^'''^ = {Ti: : 3G((G, G 71(^^5)}. Let = {7^ : 3G[(G,W) G 7^(^;5), |G - U7^| = 1}; 
let ^2 = A'P'"'''^ - A\. Define oz : A ^ A2 ^ before: 03 (i) = W if i G A-^ and 0-3 (i) is 
undefined otherwise. Much as before, we define T3{Ti.) = n(^^ — Ti). Since it is easy to see 
that TZ{G^) = TZiQ^) for some appropriately chosen ■0, it is immediate that Lemma iA applies 
without change to and t^. 



Lemma 4.14: If He A2, then \An\ > n + 1. 



Proof: Suppose, by way of contradiction, that H G A2 and 1 < \A-h\ < n. We must have 
\An\ > 1, for otherwise Ti G ^1. Since A2 C ^t^""*, there must exist G eV"-{g^) such that Ti 
is G-maximal. But if l^-^l < n, then every singleton subset of A-j-i is in This contradicts 
the fact that TC is G-maximal, because if Ti' is Ti together with one of these singleton subsets, 
we must have G - UTi' / 0. ■ 



Proposition 4.15: ip is satisfiable in iff ^'^^ is satisfiahle in M.'[^^j^_^^. 

Proof: First suppose that (M, s) ^ if, where M G MjK We convert M = {S, vr, {/Cj : i G A}) 
into a structure M' = (5,7r, {Kh ■ Ti G A'f^'"'^}) as before, by defining Kn = U{/Ci : i G r3(^)}. 
As the union of symmetric relations is symmetric, the proof that this works is essentially 



identical to that in Lemma i.i. for the case of 



For the opposite direction, suppose that (M, s) \= ip'^^ for some M = {S, vr, {IC-h : Ti G 
^ip,rstj^ ^ A4^*_,__42. We must construct a structure M' G M^f that satisfies (p. The state 
space for the structure M' will again consist of copies of S, but two copies no longer suffice 
to guarantee that the /Cj relations are equivalence relations. In fact, we use countably many 
copies. 



By Lemma 4.14, for each Ti G A2, there exist at least n + 1 agents in A-j-^. Choose n + 1 such 
agents, and call them i^, . . . Partition A-j-i into n + 1 disjoint sets G-^j with iy^ G G-j-i^j. 
We build copies of M in a tree- like manner. We index the copies of M with strings of the form 
((si, ii), ii, . . . , (sfc, ifc), ifc), such that Sj^tj G 5, ij is for some Ti G A2 and < j' < n, 
{sj,tj) G /C>{, and ij ^ ij+i- Roughly speaking, between and ^cj-{{sk,tk),ik) have edges 
for the /Cj relations for {1} G .4i and also edges between and in /Cj^; however, there are 
no edges in K,j if {j} ^ ^1 and j 7^ ik', moreover, there are no other edges in /Cj^ except those 
required to assure reflexivity. 

Before we can construct M', we need some preliminary observations. We can suppose that 
the states in 5 are numbered. Thus, for each state s G 5, if (M, s) \= -^Cctp, there is a 
lexicographically minimal shortest path (sq, • • • , Sfc) such that (sj, Si+i) G K-n for some Ti £ G 
and {M,Sk) \= -■V'- Note that, for each i < k, (M,Si) \= ^Cctp and {si,...,Sk) is also the 
lexicographically minimal shortest G-path from Si leading to a state that satisfies -1^. For 
each s G S" and B = E or C, let -^Bq-^^Pi, . . . , -^BQ^ipj^ be the formulas in Sub^{p) such that 
(M, s) \= {-^BQ.ijjjY'^ . For each state s G S, we can associate a set F{s) of at most n pairs 
{Ti,t) such that (s,i) G IC-h and for every formula Bci^ G Sub{ip), if (M, s) ^ {-^BgiPY'"^ , then 
there exists a pair (7^, t) G F{s) such that t is the first state after s on the lexicographically 
minimal (T3(Gj)-path from s to a state satisfying -^ijj. 
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We can now define a set S of strings inductively. Let Eq be the empty string. Suppose 
that we have constructed consisting of strings ((si,ti),ii, . . . , {sk,tk),ik) with the properties 
given above. For each a = {{si,ti),ii, . . . , {sk,tk),ik) € ^k, s G S, {TCjt) G F{s), such that 
7i £ A2, there is exactly one string a ■ {{s,t),i) G S^+i. We choose i G A-h in such a way that 
i ik, i is one of i^, . . . , i^, and a different i is chosen for each {H, t) G F{s). Since < n 

and we can choose among n + 1 agents ig^, . . . , i^, this can clearly be done. Let S = U/tS^. 

Let M' = (5', tt', {/Ci : i G be defined as follows: 

• S' = Uo-gs5'o-i where each is a disjoint copy of 5. We denote by Sa the copy of state 
s G 5" in Sa- 

• 7r'(so-) = 7r(s) for s G 5, cj G S. 

• If o"3(i) G ^1, define /Cj = {(so-j^o-') : is,t) G /C0-3 (j) , cr' G S}. /Cj is clearly reflexive, 
symmetric, and transitive in this case, since /C(j3(j) is. 

• If a-i{i) =T-C £ A2 and i G Gnj, then /Cj = {{sa, s^) : s G S", cj G S)} U {(so-, to-')i (Vi -So-) : 
cj' = (T • ((s,t),i:^) and {s,t) G /Co-3(j)}. Again, it is clear from the construction that /Cj is 
reflexive, symmetric, and transitive. 

• If cT3(z) is undefined, then /Cj = {{sa,Sa) : s & S,a £ S)}. Of course, in this case /Cj is 
also reflexive, symmetric, and transitive. 

We claim that for each formula tl^ G Sub'^{<p), the following are equivalent: 

(a) (M,s) 

(b) {M',Sa) \= for all a G S, 

(c) (M', So-) 1= tp for some cr G S. 

The argument proceeds by a straightforward induction on the structure of tp. The argument 
that (a) implies (b) is easy using the induction hypothesis, and the implication from (b) to (c) 
is trivial. For the argument that (c) implies (a), the only interesting cases are when ip is of 
the form Kiip' , EqiP' or CqiP' . For Kiip' , the argument is easy because it is easy to see that 
{i} G Ai. For Eg^P', suppose that (M',s<^) \= Eq^' . Then we must have (M, s) ^ {Eg^'Y'-' . 
For suppose not. Then there is some iT~i,t) G F{s) such that 7i G (Jz{G) and (s,t) G /C?^. Our 
construction guarantees that a' = a ■ {{s,t),i) G S for some i G Ay^. From Lemmas |4.3| (a) 
and |4.4| (a), it follows that i £ G. Moreover, by our construction, ^ ^i- The induction 

hypothesis now guarantees that {M'^t^') \= -^ip' . But this contradicts the assumption that 

Finally, suppose that [M' ,So) \= CgiP'- Again, for a contradiction, suppose that (M, s) \= 
^{CgiP'Y^ ■ Now we proceed by a subinduction on the length of the shortest c73(G)-path in M 
leading to a state satisfying {-^ip'Y'^ to show that (M',So-) |= ~^Gg'4'' ■ We leave the straightfor- 
ward details to the reader. | 



Next, we want an analogue of Theorem |4.9| for . The reader will not be surprised to 



learn that there are new complications here as well, although the basic result still holds. 
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Theorem 4.16: If A = Ai Li A2 is finite and there is an algorithm for deciding if i ^ G for 
G (z G that runs in time linear in \A\, then there is a constant c > and an algorithm that, 
given a formula (f of Cg , decides if (p is satisfiable in '^"'^ runs in time 0(|^|2'^l'^l) 



Proof: We start as in the proof of Theorem 4.£ . Again, we assume for ease of exposition that 



^1 7^ 0. For i G ^1, let 5/ consist of aU the subsets of ESuhf{tp) that are maximahy consistent 
and let S"^ = iJi^^A^S}. The definition of the /C, relations depends on whether i € ^1 or i G ^2- 
For i € Ai, we define the /Cj relations on so that (s, t) G /Cj iff s / Ki\j{Kiilj : Kitp E s} C t and 
s/Ki U {Kitp : Kitp E s} = t/Ki U {Kiip : Kiij) E t}. It is easy to check that this modification 
forces these ICi relations to be Euclidean and transitive. For i E A2 we define /Cj so that 
E /Cj iff s/Ki C t and t/Ki C s. Clearly this modification forces these /Cj relations to be 
symmetric. We force all the /Cj relations to be refiexive just as with A^^, by eliminating s E 5^ 
if (s, s) ^ /Cj for some i E ^1 U A2- 

We now must also change the definition of s seeming consistent. Define the relations ^j 
on 5^ X S} by taking s ■<i s' if s' E S} and s n ESuhi{^p) C s' . Suppose that we have defined 
5^, . . . , S"^ . S"^^^ consists of all states s E 5"" that seem consistent, in that the following three 
conditions hold (where we assume that all states considered are in S^): 

1. For all i E ^1, there exists an s' E such that s ^j s' . 

2. There exist distinct agents ii, . . . ,ik E ^1 and states si, . . . ,Sk such that s Sh for 
h € {1, . . . ,k} and for every formula of the form ^Ecip E s, there is a i such that either 

(a) {3i eGn A2)i{s, t) E /Cj A e t) or 

(b) {3h < k){ih EGA {sh^t) E /Cj, A -V e t). 

3. If ^Ccip E s then there exist states sq, Sq, si, s'l, . . . , Sk such that s = sq, -^ip E Sk, and 
there exist j'o, . . . ,jk-i in G such that, for each i < k, {s[, Sj+i) E /Cj- and either jt E ^2 
and Si = s'i or ji E ^1, Sj ^j. s- and s- is acceptable for Sj, where we say that s' is 
acceptable for s if there are states Sh and agents i/i, /i = 1, . . . , fc, as described in condition 
2 for s, and s' = Sj for some i < k. 

We need to show that we can check whether s seems consistent in time 0(|^|2l'''l). The only 
difficulty is to determine, for given s and s', if s' is acceptable for s. It is clear that k < \ip\, 
since we need at most one state and agent for each formula of the form ^EqiI^ E s. However, if 
we simply check each subgroup of states containing s' and of agents containing j where s' E Sj 
that are of size < \(p\ in the naive way, this check will take time at least C(2l'^l, |(^|)C(|^|, \<p\) 
(where C{n,k) is n choose k), which is unacceptable for our desired time bounds. Instead, we 
proceed as follows. 

Suppose that s' E 5/^ and s <i^ s' . (If it is not the case that s <i^ s' , then clearly s' is not 
acceptable for s' .) Let F{s,s') consist of all formulas Eg'4> such that 

1. ^Eg^ E s, 

2. -.3t, ^(i E G n ^2 A {s, t) elCi A ^i/j e t), and 

3. \A{s,s',EgiP)\ < \ip\, where A{s , s' , Egi/j) = {i E GdAi : i = ii V 3t{s <i t A -^Kii) E t)}. 
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Intuitively, F{s, s') consists of the potentially "problematic" formulas that may prevent s' from 
being acceptable for s. 

Let T = U£;g^gi?(s) .s', E'gV')- Note that |T| < \(p\'^. Suppose that T = {ii, . . . ,1^}- 
We construct sets Bi, . . . , B]\f of subsets of F{s,s') with the property that a set X € -B^ iff 
there exist states ti, . . . ,tk such that s -<i. tjioTj = l,...,k,ti = s' and, for each formula 
Egi/j G X, there exists a j such that ^Ki-if: € tj. 

Given a state t £ Sj, let Ft{s, s') = {Eq^j G F{s, s') : ^Ki^j et, i e G}. Intuitively, Fj(s, s') 
consists of the formulas in F[s, s') that can be "taken care of" by state t. Let Bi = {Fg/{s, s')}. 
Suppose that we have defined Bi, . . . , B^. Let -Bfc+i = U Ft{s, s') : X e Bk As ^j^,^^ t}. 
It is easy to check that B^^i has the required property. Moreover, we can compute the sets 
Bi,...,Bn in time 0(2^"). To see this, note that since |F(s,s')l < Iv'l, clearly \Bj\ < 2l'^l. 
Thus, given Bj^, we can clearly compute -Bfe+i in time 0(2'^") for some c > 0. Since A'' < 
the result follows. Finally, we claim that s' is acceptable for s iff F{s, s') G B^. 

Clearly if F{s,s') ^ Bn, then it is almost immediate from the definition that s' is not 
acceptable for s. Conversely, if F{s) G Sat, then there exist states ti, . . . ,ti\f such that s' = ti, 
s <i. tj and, for each formula in -Eg^ € F{s), there exists j such that K-i.^jj G tj. Wc clearly do 
not need all of these states and agents; we just need at most one for each formula in F{s, s'). 
That is, there exists a set A' of agents (contained in {ii, . . . ,ZAr}) with |^'| < \F{s, s')\ and a 
state Ui corresponding to each agent i £ A! (contained in {ti, . . . , tAr}) such that for each formula 
Ec'ip G F{s,s'), there exists an agent i £ A' such that s Ui and -^Kitp G Uj. We now wish 
to extend A! to a set showing that s' is acceptable for s. If we consider any -iEqiP G s, either 
condition 2(a) is satisfied or there is already an i E A' satisfying 2(b) or \A{s,s',EgiP)\ > Iv'I- 
In the last case, it is immediate that we can extend A' to include an agent satisfying 2(b) for 
Eai'. 

To show that this algorithm is correct, first suppose that is satisfiable. In that case, 
(M, So) 1= <p for some structure M = (5, vr, {/C^ : i G A}) G TW**. As for M'^^, we can 
associate with each state s e S and i e Ai the state s* in Sj consisting of all the formulas 
tp G ESuhi{(p) such that (M, s) \= 'ijj. It is easy to sec that if (s,t) G /C^ then (s|,f|) G /Cj. 
Using this observation, a straightforward induction shows that the states s* for s £ S always 
seem consistent, and thus are in for all j and all i € Ai. Moreover, ip e (so)| for alH G ^li. 
Thus, the algorithm will declare that (p is satisfiable, as desired. 

For the converse, we need to show that if the algorithm declares that (p is satisfiable, then 
it is indeed satisfiable in ■ We need to work a little harder than in the previoTis 

proofs. Now we can no longer just view the object constructed by our algorithm as the required 
structure. Rather, it serves as a "blueprint" for building the required structure. 

Suppose that the algorithm terminates at stage N with a state u G Si^ = containing (p. 

Before we go on, we make one observation that will prove useful in the sequel. Notice that if 
s <i s', then Ecip G s iff Ecip G s' for G ^ {i}, and if j G A2, then {s,t) G ICj iff {s',t) G ICj. 
A complete state is a vector s = (s* : i G A s* G S-^) such that 

• :<j s^ for all i,j £ Ai and 

• for every formula of the form ^Ecip G Uig^^s*, there exists an agent j G and a state 
t G 5^ such that -iip G t and cither j G Ai H G, ^Kjtp G s^ , and {s^ ,t) G JCj or j G A2 
and (s*,i) G ICj for some i £ Ai (and hence (s',t) G ICj for all i G ^1). 
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By consistency condition 2, every state s € S'^ must be a component of some (perhaps many) 
complete states. 

Define a structure M* = {S*,tt*, {/C* : i e AiU A2} as follows: 

• S* consists of all complete states; 

• iT*{s){p) = true iff p e Uig^^s*; 

• [s, t) G /C* for ieAiiSs' = f or {s\f) G /C^; 

• (s, F) G /C* for i G ^2 iff {s^ € for some j G ^1 (it is easy to check that if {s^ ,P) G )Ci 
for some j G Ai then {s^ ,t^) G /Cj for all j G ^1). 

It is easy to check that M* G -^^J+^j' '^^^ show that for all if^ G Ui^_/[-ESubf (if) , we 
have 

(M*,s) hV'iff V'GUie^,s\ 

We proceed, as usual, by induction on the structure of "0- If '0 is a primitive proposition, a 
conjunction, or a negation, the argument is easy. Suppose that ■0 is of the form EqiI^' ■ If 
-E'g'0' ^ Ujgy^jS*, then the construction of the )Cj relations guarantees that tp' G Uj(=_4^t* for all 
Tg 5* such that (s, t) ^ K* for some j G G. Thus, by the induction hypothesis, we have that 
(M*,s) \= EqiP'- For the converse, suppose that ^EqiI^' G Ujgy^jS*. Then from the definition 
of complete state and consistency condition 2, there must be some complete state t and j G G 
such that (s, t) G /Cj and ->ip' G Ujg^^t*. 

Finally, suppose that ^p is of the form CqiP' . If CgV'' ^ Ujg^^s* then, since Eg{'4'' A Ccip') 
must also be in Ujg^^s*, an easy induction on the length of the path shows that for every 
complete state t G-reachable from s, we must have ip' G Ujg^it* so, by the induction hypothesis, 
we have (M*, s) \= Cctp'- For the converse, suppose that ^Ccip G Ujey^^s*. Then -■CcV' £ s-' for 
some (in fact, all) j G Ai. If Gn^i / 0, choose j G Gfl^i; otherwise, choose j G G arbitrarily. 
From consistency condition 3, it easily follows that there exist complete states sq,. . . ,Sk and 
jo, ■ ■ ■ ,jk-i G G such that = , {sh, 4+i) ^ /C*^ h = 0, . . . ,k - 1, and -^ip' G Ui^AiSl- If 
j G Ai, then (s, So) G /C^; if j ^ ^1, then jo G and it follows from our initial observation 
that {s,si) G ICj^. In either case, Sk is G-reachable from s, so (M*,s) j= -^GqiP', as desired. I 



We can now prove Theorem 'iA for 



Proof of Theorem 3.4 for : Again, the lower bound follows from standard results in 



|HM9| 



For the upper bound, suppose that we are given a formula 93 such that n = \<f\. We can 
compute the set £^{Gip) defined just before Lemma |4.11 in time 0(n^2'^"'), using at most 'n?2^' 



calls to the oracle Cm, just as we computed £^{Qip). Similarly, we can characterize the sets TL 
such that {G,n) is in 7^(a;^*) = TZ'^iQ^) by a pair {n',X), where H' C and X is either 
or an element of £m{G<fi) and compute which of the pairs actually represent sets in TC such that 
{G,H) G TZiQ"^) using at most 2n(2^" + 2") cahs to the oracle Om- We cannot compute the 
individual elements of the sets ^4-^ such that < m, but it does not matter. It suffices that 
we know the cardinality of these atoms (which our oracle will tell us). We let Ai consist of 
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the agents i^, . . . , for each H such that {A-i^l < \ip\ {i^, . . . , ij^-u] J^^^ fresh names for 
agents); let A2 consist of aU TC such that \Afi\ > \ip\. 

It is now straightforward to compute the formula ip'^''^ in time 0(2"^") using 0(2"^") oracle 



calls. We now apply Proposition 4.15 and Theorem 4.16, just as we applied Proposition 4.1 



and Theorem |4.5| in the case of A4_4. | 

We now turn our attention to proving Theorem for Again, the basic structure is 

the same as for M.ji and A^^. 

Lemma 4.17: The mapping (when viewed as a map with domain 2-^) is injective on Q^. 

Let (S5g consist of the axioms in (Tg (including E5) together with E6 and every 

instance of K4 and K5 for i G Ai- We write {Sbg)-^'^'^-^'^ ip if there is a proof of i/^ in 
(S5g using only the modal operators that appear in 99 and Ki for i ^ Ai. 

Lemma 4.18: If A is finite and (f G Cg is valid with respect to Ai^^^^j^^,^, then (SSg)-^^^-^^ 



Proof: The proof is similar in spirit to that of Lemma 4.13 for Ai^^, except that since we have 
a different definition of the /Cj relations and of seeming consistent, we must check that states 
eliminated under this definition are inconsistent. Again we must consider each of the three 
ways that a state s can be eliminated. 

First, suppose that s £ and, for some i € Ai, there is no s' such that s s' . As 
before, propositional reasoning shows that (S5g \-ip (fs ^ \/ ^g,^si..,^.gij(ps' ■ Thus, it 
easily follows that (S5^)'^i+-^2 

Next, suppose that s £ does not satisfy the second condition of seeming consistent. 
There must be a formula ^EqiI^ G s such that 

1. for all i £ A2 and all t G such that (s, t) G /Cj, we have ^p £ t and 

2. for all i G G n ^1, and all t £ such that (s*, t) G /Cj, we have ip £t. 

Define an extension of s to be a vector s = (s* : i G ^1) of states, where s :<i s*. Let 
EX{s) be the set of all extensions of s. If s is an extension of s, let ifg be the conjunction 
over all i G ^1 of the formulas in ipgi. By straightforward propositional reasoning, we have 
(S5^)-^i+-^2 ^ yg^EX{s)fs- Thus, to show that (S5^)'^i+-^2 ^^^^ g jg eliminated 

by the second condition of seeming consistent, it suffices to show that (SSg)'^^^'^^ -,ip^ for 
each s G EX{s). This we do by showing that (SSg)'^^^'^^ =^ EqiP for each s G EX{s). 

So suppose that s G EX{s). The proof follows the lines of the analogous argument in 



the proof of Lemma 4.13 . As before, it suffices to find, for each i £ G and each t £ with 
£ t, a set G*'* of agents containing i such that {S5q)-^'^~^'^^ ipg =^ EQi,t^(pt. For i £ A2, 
this follows as before if the reason that (s,t) ^ /Ci is that s/Ki <^ t. If instead t/Ki ^ s, 
then there is some Eg'O £ t with i £ G' such that ^0 £ s and so ^9 £ for each i. Thus 
(S5g)-^i+'^2 ^ ^0 and, by E6, (S5g)-^i+-^2 -^6 Eg'^Eg'O. Since Eg'O £ t we have 

that (S5g)-^i+-^2 ^ EG'^ift- That is, we can take G*'* = G' in this case. 
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For i G Ai, we show that {S5q)-^^^-^'^ (fg =^ Ki^ipt (so that we can take G*'* = {i}). 
By our assumption, (s*,i) ^ /Cj for all t G Sj. Thus, if t G 5j, there is some formula 6 such 
that either Ki9 E s* and ^KiO € t or i^j^ G t and ^KiO G s*. Here we are implicitly using 
the following facts: (1) if EqiO g s for some G' such that i & G' then iCj^ G s*, since s* G 5"^!^, 
and similarly for t, (2) if Ki9 ^ s, then -^KiO G s, since Sj, and similarly for t, and (3) if 
Ki9 G s* then 9 € S since (s, s) G /Cj, and similarly for t. If -R'j^ G s and ^Ki9 G t, it follows 
that (S5g)-^i+-^2 Ki^'Pt just as in the case of {SA^)^^+^^. If K,9 G t and ^Ki9 G s, 

then by K5 we have (S5g)-^i+-^2 ^ i^i-Ki^ (S5g)-^i+-^2 ^^.^ ^ xhe desired 

result now follows by standard arguments. 

We have now shown that for all z G G and t G Sj such that ip G t, there exists some 
set G*'* with i G G*'* such that (S5g)"^i+"^2 =^ EQi,t^(pt. We can now conclude that 

(S5g (/3s =^ ~^Eg'4^ just as in the case of (SAg)-^'^'^-^^ , showing that (fs is inconsistent, 

as desired. 

Finally, if s G S-' does not satisfy the third condition of seeming consistent, the argument 
that (S5g )"^^'*'"^^ -^(fs is similar to that of Lemma O. We replace G-reachability by the 



existence of sequences as in condition 3 in the definition of seeming consistent in Theorem 4.16 
and note that we have essentially already proved the analogue of (^) from Lemma [4.7| . We leave 
the remaining details to the reader. | 



Proof of Theorem 3.1 for A4^'*: The proof follows as for using the analogous lemmas 



proved above for AA^ . I 
4.4 Dealing with 

For A4^*, we proceed much as for There is one new subtlety. Consider the construction in 



the proof of Proposition 4.15, which uses a^. Recall that as{i) may be undefined for some i. For 
such i, we defined /Cj to consist of all pairs {s^, s^), making it reflexive. This approach will not 
work for M^. More precisely, the analogue of Proposition [4.15 for will not hold using this 



construction (even if we drop the reflexivity requirement). For example, if 99 = -^pAEgiPAEg2P 
and Gi n G2 7^ 0, then tp'^^ is satisfiable in A^^*^.^^ ^lut tp is not satisfied in the structure M' 



constructed in Proposition 4. 15, since for all i G Gi nG2, the construction will make /Cj reflexive. 
We solve this problem by defining a mapping o"4 much like (T3, except that we ensure that o"4 is 
never undefined. 

Let B be the set of maximal subsets T of such that PlT 7^ and such that the corre- 
sponding atom over Q'^, At = (HT) n (PlGee^-rG) (= flT by the maximality of T), is not one 
of the ones An for H G Let = UB, Ai = BU{n £ A^^'''^ : = 1}, 

A-i = A^^""^^ - Ai. The definitions oi ga : A ^ ^"^'^^ and : 2^ need some care. 

If i G A-j-i for some Ti G A^'"^^* ^ let ai{i) = Ti as before. Otherwise, choose T £ B such that 
T 2 {G € Q,fi : i £ G} and let a{i) = T. Note that, by construction, (T4 is defined for all i. 
For n G T^in) = ri{G^ - n} as before. For T £ B, choose some ir G At (it does not 

matter which) and set T4(T) = {it}- 

Proposition 4.19: ip is satisfiable in M'^ iff ^""^ is satisfiable in A^^'^^^^^- 
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Proof: First suppose that (M, s) |= ip, where M G M^'-*. We convert M to M' G -^^*+^2 
as before by defining Kj = Uj/Cj : i E T4(T)} for Z € To apply Proposition LI, we 

need to show that U{t(Z) : X S (T4(G)} = G for ah G G Q,p. We know from the analysis 



of the case that U{r3(?^) : H G ct3(G)} = G for all G € G^. Since cJ4(G) 2 ct3(G) 



and T4{n) = T3{n) for H G we have that U{t4{I) : T G a^iG)} = U{r3(H) : H G 

a"3(G) U U{r3(T) : Z G cr4(G) — C73(G)}. It is clear from the definitions, however, that if 
I G CT4(G) — cr3(G), then there exists some i £ G such that I = ai{i) and (73(1) is undefined. 
Moreover, X = C G, so G G. Thus, U{t3{I) : I G o-4(G) - cj3(G)} C G, so 



U{t4{I) : J G o-4(G)} = U{T3{n) : n e (TsiG)} = G, as desired. Applying Proposition we 
get that to see that (M', s) \= ip''^. 

It remains to verify that M' G ■A^^*+^2' t^^i^i need to show that the ICj relations 
for 2 € Ai are Euclidean, serial and transitive and that those in A2 are serial and secondarily 
reflexive. For the ones in ^1, note that T^il) is a singleton and so the desired properties hold 
since they hold for all agents in M. For the ones in A2, we just note that the union of serial 
relations is serial and the union of Euclidean relations is secondarily reflexive. 



For the other direction, we proceed much as in the proof of Proposition 4.15| . In addition 



to the concerns dealt with there for A4^^^, our primary new one is to make sure that the JCi 
relations for all agents are serial. The problem arises for those i for which (73(1) was undefined. 
The new agents in B are used to deal with this problem. 

We proceed much as in Proposition 4.15| , with two changes. First, we replace the automatic 



forcing of reflexivity by forcing secondary reflexivity for (73(1) G A2- Second, we modify the 
definition of the /Cj relation in M' as follows. 

• If (T4(z) G Ai nA'^'''''^ then, as before, /Cj = {(s^, V) : {s,t) G /C^g (j) , cj, cj' G S}. 

• If <T4(i) G A2 and i G Gnj, then JCi = {(so-, V); (V; ■ cr' = a ■ ((s, t), i^^)}- 

• If 0-4(1) = T e B, then Id = : (s,t) G IC^^(^i),a,a' G S}. 

Now note that every relation /Cj is Euclidean, serial and transitive. For the ones correspond- 
ing to agents in Ai this is immediate from the fact that the agents in Ai have these properties. 
For those with (74^(1) G A2, seriality follows from the fact that the agents in A2 are serial and 
the construction. Transitivity and the Euclidean property follow from the construction. In par- 
ticular, if there is a /Cj edge coming into some to- then there is none going out by construction 
except for the one from to itself. 



The verification that M' satisfies if now proceeds as in Proposition 4.15. I 



Theorem 4.20: If A = Ai+ A is finite and there is an an algorithm for deciding if i £ G for 
G £ Q that runs in time linear in \A\, then there is a constant c > (independent of \A\) and 

time 0{\A\2''M). 



an algorithm that, given a formula if of Cq , decides if ip is satisfiable in A^^*+_42 o-nd runs in 



Proof: The argument here is like that for the ■M.^Xi+A2 '^^^^ Theorem 4.16. We keep the 
definition of /Cj for i £ Ai and, as we noted there, this makes these relations Euclidean and 
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transitive. We change the definition of ICi for i E A2 by putting in /Cj iff s/-fCi C t and 
t/Ki C t. This latter definition clearly makes the /Cj secondarily reflexive for i € A2- We ensure 
seriality by adding a clause to the definition of a state s seeming consistent: 

4 For every agent i ^ A2 there is a state t such that (s, t) € /Cj and for every agent i ^ Ai 
there are states s' and t such s s' and (s',t) € /Cj. 

The proof now proceeds as before. | 



Proof of Theorem 3.4 for The argument here is essentially the same as for A^^*. Just 

note that using the oracle O' we can determine the members of B within the appropriate time 
bound and so compute ip'^'^ as required. | 



We now turn our attention to proving Theorem |3.1| for . The basic structure is the 
same as for Al^*. 

Lemma 4.21: The mapping (T4 (when viewed as a map with domain 2-^) is injective on QJ^. 

Let (KD45g consist of the axioms in Kg together with K3, E4, E7, and every instance 

of K4 and K5 for i G ^1. We write (KD45^)-^i+-^2 ^ if there is a proof of -0 in (KD45^)-^i+-^2 
using only the modal operators that appear in and Ki for i ^ Ai. 

Lemma 4.22: If A is finite andip € Cg is valid with respect to M^^^_^^, then (KDibg)-^^'^-^'^ 



Proof: The proof is similar to that of Lemma 4.18| for Again we must check that all 



states eliminated in the construction are provably inconsistent, but now using the axioms of 
(KDA5g)-^^~^-^^ and the modified definition of the /Cj relations, and dealing with the additional 
clause in the definition of seeming consistent. 

The argument for the first condition for seeming consistent is the same as that for A^^*. 

Before dealing with the second condition, we prove a fact that will also be useful in dealing 
with the fourth condition. Let Ti = {t £ Sj : {t,t) £ /Cj}. It is easy to see that 

if t ^ Tj, then (KD45g)-^i+-^2 ^ Ec^^pt for some G such that i £ G. (13) 

For if t ^ Tj, then there exists Eg6 G t such that i £ G and ^9 € t. But then {EgO =^ 6) ^ ^cpt 
is propositionally valid (and so provable by Prop). Since (KD45g )-^^"*"'^^ ips Eg{Eq6 =^ 
6), we can easily obtain (p^) using (^. 

Now suppose that s is eliminated because it does not satisfy the second condition for seeming 
consistent due to E'gV'- It again suffices to show that for each i £ G and t £ such that tp £ t, 
there is a set G*'* of agents containing i such that (KDA5q)-^^~^-^^ h,^ (fg EQi.t^ft- First 



suppose i £ A2- If {s, t) ^ /Cj because s/Ki % t then the argument given in Lemma 4^ works to 
get a G*'* as desired. If s/Ki C t but t/Ki % t then the existence of the required G*'* is immediate 
from ([l3|) . Now suppose i £ Ai and t is such that {s\t) ^ /Cj. If s/Ki ^ t, then there is some 
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formula 9 such that Ki0 G and -.6* G t; it easily follows that (KD45g |-_^ (^_, ^ Ki^(pt, 

as required. If {A'i^ : KiO G s} ^ t, then there is some 9 such that -fCj0 G s but -^Ki9 G i; the 
result now easily follows using K4, just as in the argument for (S4g If both of these 

conditions hold (but still ^ /Cj), then it must be that there is a with Ki9 G t and 

Ki9 ^ s. In this case -^Ki9 G s, and the result follows using K5, just as in the argument for 

The argument in the case that s is eliminated because it does not satisfy the third condition 
for seeming consistent is the same as in the proof of Lemma [4.18 . 



Finally, suppose that s does not satisfy the new (fourth) condition of seeming consistent. 
Then either 

• there is an i G A2 for which there is no t with (s, t) G KLi or 

• there is an z G ^1 for which there is no pair s', t such that s s' and (s', t) G /Cj. 

For the first case, for each t G Tj, it must be the case that s/Ki ^ t, so that there must 
be some G*'* with i G G*'* such that (KD45^)-^i+'^2 ^ ^ Ec^,t^^t, as usual. By for 
each t ^ Ti, there is some G*'* with i G G*-* such that (KD45^)'^i+-^2 ^ Ec^.t^Lpt. Thus, 

(KD45g)'^i+^2 ^ Ate5,^G-'-</'t- But since (KD45g)^i+^2 ^(A^g^.^f^^) by induc- 

tion and propositional reasoning, it follows from E7 that (KD45g -^{/K^^gj EQi,t^^pt) ■ 

Thus we get (KD45g)-^i+-^2 ^^^^^ ^s desired. 

For the second case, we know as in the proof of Lemma [4.18] that ips is provably equivalent 
to the disjunction of (ps' for those s' such that s s' and similarly for any t. Thus to prove 
(KD45g)-^i+-^2 ^(^^ it suffices to prove (KD45g)-^i+-^2 ^y,^, foj. e^ery s' G 5/ such that 

s :<i s'. For each such s' we know that there is no t' G 5^ such that (s',t') G JCi. Given s', if 
t' G and (s',t') ^ JCi, then the same argument as in the proof of Lemma |4.1^ shows that 
(KD45g )'^^^"^^ \-ip (fgi =^ Ki^iff, since the JCi relations are defined the same way for agents in 
Ai in both the M'^ and cases, and the proof in Lemma |4.1§| used only axioms K4 and K5 
(as well as Prop, Kl, and MP), and these axioms are in both {S5g)-^^~^-^^ and (KD45g)-^^^-^'^ . 

By dD, we have that (KD45g)'^i+'^2 ^ ^ K^{A^,^^j^ipt'). Since (KD45g)'^i+'^2 
(A^i^gj^ipt') =^ false by induction and propositional reasoning, we conclude that (KD45g )"^i''~"^^ 

f/^s' =^ Kifalse. Now using K3, we get (KD45g )-^i"'"-^2 -k^^/, as desired. I 



Proof of Theorem 3.1 for Aij^: The proof follows as for using the analogous lemmas 
proved above for We must just show that E7 is derivable from the other axioms in 

KD45g. Suppose that i G Gi n . . . Gfc. Then, using El, KD45g h Ecifi A ... A Ecf^fk 
Knpi A ... A KjV^fc- By (|), we have KD45g h A ... A Kitp^ =^ Ki{(pi A ... A tpk). Thus, 

KD455 I — 'Ki{LpiA. ..A(pk) =^ -'{Egi'Pi^- ■ ■/\Ec^^(pk)- It thus suffices to show that in KD45g, 
from -^{(fi A . . . Aipk) we can infer ^Ki{ip/\ . . . Aipk)- But since -^{(fi A . . . Aipk) is equivalent to 
(931 A . . .ipk) =^ false, this follows easily using d) and K3. I 
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4.5 The complexity of querying the oracles 



Up to now we have assumed that we are charged one for each query to an oracle. In this 
section, we reconsider our results, trying to take into account more explicitly the cost of the 
oracle queries. 

Let f{m, k) be the worst-case time complexity of deciding whether a set with description 
G G such that 1{G) < k has cardinality greater ml <m (where we take the worst case over 
all G € Q'j^ such that 1{G) < k and over all m' < m). Let g{k) to be the worst-case complexity 
of deciding if Gi fl . . . n = for Gi, . . . , G Qj,. We take f{m, k) (resp., g{k)) to be oo if 
these questions are undecidable. We can think of f{m, k) (resp., g{k)) as the worst-case cost of 
querying the oracle Dm (resp., O') on a set with a description of length < k. 

Using these definitions, we can sharpen Theorem as follows. 



Theorem 4.23: There is a constant c > and an algorithm that decides if a formula G Cg 
is satisfiable in Ma (resp., M^^, M^^, M^J\ M^) and runs in time 2^^'^^ f{0,\ip\) (resp., 
2-1^1/(0, Iv^l), 2'^Mf{l,2-M'), 2<^Mf{\ip\,2-M'), 2'=lvl(/(|(^|, 2^1^!') +5(|<^|)); Moreover, if Q con- 
tains a subset with at least two elements, then there exists a constant d > such that every 
algorithm for deciding the satisfiability of formulas in M.^ (resp., M.^, M^, A^^*, A^^*j 
runs in time at least ma^{2'^\'^\ , f{0,d\ip\)) (resp., fmax(2'^l'^l, /(O, max(2'^l'^l , /(I, 

max(2'^l'^l , /((i|v9|, m.ax{2'^^'^^ , f{d\cp\,d\cp\), g{d\ip\))) for infinitely many formulas (p. 



Proof: The upper bound is almost immediate from the proof of Theorem |3.4| . The only point 
that needs discussion is the second argument — 2'^l'^l — of / in the cases M^, and M^- 



This follows from Lemma 4.11, An easy induction on i shows that the sets in the set £l 



constructed just before Lemma 4.11 have description length at most < 2^*1'^' (using the fact 



that l^"]*^'! < 21*^1 for all i). Thus, all the sets that we need to deal with have description length 



< 2^1*^1 , since they are all in ^|^| , by Lemma 4.11| (e). 



The lower bound is immediate from the results of [ [HM92 ] and Proposition 



Note that if /o(^) = /(O, k) is well behaved, in that there exist c', ko such that foik) < 2*^'*^ 
for all k > ko or fo{k) >2'^^ for all k > ko, then it is easy to see that there is some c" > such 
that 2'=l^l/(0, < max(2^"l'^l,c'7(0, Thus, if /o is weh behaved, then the lower and 

upper bounds of Theorem match, and we have tight bounds in the case of Ma and Ma. 
This is not the case for M^^, M^*, and M^, because the sets that arise have exponential-length 
descriptions. 

Do we really have to answer queries of about such complicated formulas if we are to deal 
with Ma, M'a', and To some extent, this is an artifact of our insistence that the sets be 

described using union and set difference. In fact, all the sets that we need to consult the oracle 
about in our algorithm are atoms, and so have very simple descriptions (0(|(/3|)) if we are allowed 
to used intersections and complementation. Indeed, suppose that we define an ordering -< on 



atoms such that A-}^ -< A-j^r ifTi D 7i' . It follows easily from Lemma 4.3 and Lemma 4.4 that in 
order to compute o"2(G) (resp., <T3(G), (T4(G)), we start by considering all atoms A-j-i such that 
G appears positively in A-j-i and all other sets in appear negatively; we then need to check 
whether l^^^l > and {A-^l > 1 (resp., > 0, . . . , and {A-j-il > \{p\) only for those atoms A-j-i 
such that for all H' -< H, we have < 1 (resp., |^?^'| < Iv^l). (In addition, in the case of 
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o"4, we have also have to check whether GiCi . . .CiGk = 0, but again, these are sets with simple 
descriptions if we allow intersection.) Thus, as long as we can check the required properties 
of sets described in terms of intersection and complementation relatively efficiently, then the 
queries to the oracle pose no problem. Unfortunately, the bounds in Proposition |3^ depends 
on the descriptions involving only set difference and union, so we cannot get tight bounds for 
Theorem |3.4| (at least, with our current techniques) using descriptions that involve intersection 
and complementation. It remains an open question whether we can get tight bounds in all cases 
taking into account the cost of querying the oracle. 



5 Conclusions 

We have characterized the complexity of satisfiability for epistemic logics when the set of agents 
is infinite. Our results emphasize the importance of how the sets of agents are described and 
provide new information even in the case where the sets involved are finite. 

In this paper we have focused on a language that has operators Eg and Co- There are two 
interesting directions to consider extending our results. 

• We could restrict the language so that it has only Eq operators. If the set of agents is 
finite (and all sets G are presented in such a way that it is easy to check if i G G), then 
there are well-known results that show the complexity of the decision problem in this case 
is PSPACE complete [IIM92|. However, again, this result counts Eq as having length 



Although we have not checked details, it seems relatively straightforward to combine 
the techniques of [ HM92 | with those presented here to get PSPACE completeness for £g, 



taking Eg to have length 1, using the same types of oracle calls as in Theorem 3^. (Note 
that Proposition [s]^ applies to the language Cg ; we did not use the Go operators in this 
proof.) 



We could add the distributed knowledge operator Dq to the language | FIIMV95 , FHV92 



HM92]. Roughly speaking, (p is distributed knowledge if the agents could figure out that 



If is true by pooling their knowledge together. Formally, we have 

(M, s) \= Dcip if (M, t)^ip for all t G ni^clCiis). 

It is known that if A is finite (and there is no difficulty in telling if i G G), then adding 
Dg to the language poses no essential new difficulties |FHMV95, IIM92| ] . We can get 



a complete axiomatization, the satisfiability problem for the language with Dg and Eg 
operators is PSPACE complete, and once we add common knowledge, the satisfiabil- 
ity problem becomes exponential-time complete. Once we allow infinitely many agents, 
adding Dg introduces new subtleties. For example, even if we place no assumptions on the 
/Cj relations, once we have both Eg and Dg in the language, we need to be able to distin- 
guish between sets of cardinality one and those with larger cardinality since EgP ^ DgP 
is valid if and only if G is a singleton. New issues also arise once we make further as- 
sumptions about the /Cj relations because different properties are preserved for the new 
agents, say K^d and K^e^ which are to be added on as in Proposition ^]5| to represent 
D_4 and Ey(, respectively. Intuitively, /C^b corresponds to the union of the relations Ki 
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for i G G while /C_4d corresponds to their intersection. Thus, while both Kj^d and Kj^^e 
inherit reflexivity and symmetry from the Ki relations, K^d inherits transitivity and the 
Euclidean property while K^e does not. There are also additional relations between these 
agents that must be taken into account. Examples in S4 and S5 include Kj^Eip K_^D(p, 
K^eKj^dip =^ Kj^Eif and Kj^dKj^e^p Kj^sip. 

These are issues for future work. 
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